cbcvebase.

Bitrix Xscan vulnerabilities

1 known vulnerability affecting bitrix/xscan.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2015-8357P3MEDIUMCVSS 6.5PoC≤ 1.0.32015-12-16
CVE-2015-8357 [MEDIUM] CWE-22 CVE-2015-8357: Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote a Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users to rename arbitrary files, and consequently obtain sensitive information or cause a denial of service, via a .. (dot dot) in the file parameter to admin/bitrix.xscan_worker.php.
nvd
Bitrix Xscan vulnerabilities | cvebase