Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2003-1172

4 documents4 sources
Severity
5.0MEDIUM
EPSS
15.6%
top 5.31%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Apache Cocoon
Timeline
PublishedDec 31
Latest updateApr 29

Description

Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the filename parameter.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapache/cocoon2.1, 2.1.2, 2.2+2

Patches

Patch: www.securiteam.com ↗Patch: www.securiteam.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vxp8-fwp8-87mv: Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2↗2022-04-29
▶
CVEList
CVE-2003-1172: Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2↗2005-05-10
▶

💥Exploits & PoCs

1
Exploit-DB
Apache cocoon 2.14/2.2 - Directory Traversal↗2003-10-24
▶