CVE-2015-3897

EXPLOITED NUCLEI

Bonita BPM Portal <6.5.3 - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the theme parameter and a file path in the location parameter to bonita/portal/themeResource.

Exploits (1)

exploitdb WRITEUP
webappsjsp
https://www.exploit-db.com/exploits/37260

Nuclei Templates (1)

Bonita BPM Portal <6.5.3 - Local File Inclusion
MEDIUMby 0x_Akoko

References (3)

Scores

EPSS 0.6034
EPSS Percentile 98.3%

Details

VulnCheck KEV 2024-09-19
CWE
CWE-22
Status published
Products (1)
bonitasoft/bonita_bpm_portal < 6.5.2
Published Jun 18, 2015
Tracked Since Feb 18, 2026