CVE-2019-11013
Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of the restricted directory on the remote server.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2019-08-22
- Last modified
- 2024-08-04
- Weaknesses
- CWE-22
Affected products
References
- http://packetstormsecurity.com/files/154196/Nimble-Streamer-3.x-Directory-Traversal.html
- https://mayaseven.com/nimble-directory-traversal-in-nimble-streamer-version-3-0-2-2-to-3-5-4-9/
