Path Disclosure Vulnerability in CouchCMS by Couch
CVE-2018-7662

5.3MEDIUM

Key Information:

Vendor

Couchcms

Status
Couch
Vendor
CVE Published:
4 March 2018

What is CVE-2018-7662?

CouchCMS version 2.0 is vulnerable to a path disclosure issue that allows remote attackers to gain access to sensitive information regarding the file system structure. This vulnerability can be exploited through the direct access of specific PHP files, leading to the exposure of full paths within the server, potentially aiding attackers in executing more targeted attacks.

References

https://github.com/CouchCMS/CouchCMS/issues/46
x_refsource_CONFIRM

EPSS Score

89% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.