Description
Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_confirm
https://github.com/redhat-cip/edeploy/issues/231
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1153470
Scores
CVSS v3
9.1
EPSS
0.0194
EPSS Percentile
77.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Details
CWE
CWE-22
Status
published
Products (8)
redhat/edeploy
0.1.0
redhat/edeploy
0.2.0
redhat/edeploy
1.4.0
redhat/edeploy
1.5.0
redhat/edeploy
h.1.0.0
redhat/edeploy
h.1.1.0
redhat/edeploy
h.1.2.0
redhat/edeploy
h.1.3.0
Published
Oct 16, 2017
Tracked Since
Feb 18, 2026