Simplessus path traversal
CVE-2017-20105

5.4MEDIUM

Key Information:

Vendor: Unspecified
Status: Simplessus
Vendor: CVE Published:; 28 June 2022

🔔 Create Unspecified Vulnerability Alert

What is CVE-2017-20105?

A vulnerability was found in Simplessus 3.7.7. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument path with the input ..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.8.3 is able to address this issue. It is recommended to upgrade the affected component.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Simplessus 3.7.7

References

http://seclists.org/bugtraq/2017/Feb/40

x_refsource_MISC

https://vuldb.com/?id.97253

x_refsource_MISC

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Jun 28, 2022
Vulnerability Reserved
Jun 25, 2022

Credit

Dr. Adrian Vollmer

JSON

Unspecified