CVE-2015-4425
published 2015-08-18CVE-2015-4425: Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary…
PriorityP335medium4.9CVSS 2.0
AVNACMAuSCNIPAP
EXPLOIT
EPSS
3.81%
88.7th percentile
Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. (dot dot) in the dir parameter to admin/asset/add-asset-compatibility.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://seclists.org/fulldisclosure/2015/Jul/57https://github.com/pimcore/pimcore/commit/4f2a95f877d406a054f9f2253475fe58c76aa03dhttps://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-4425/http://seclists.org/fulldisclosure/2015/Jul/57https://github.com/pimcore/pimcore/commit/4f2a95f877d406a054f9f2253475fe58c76aa03dhttps://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-4425/
2015-08-18
Published