CVE-2017-10841
MEDIUMWebCalendar <= 1.2.7 - Authenticated Path Traversal
Title source: llmDescription
Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry third-party-advisory
x_refsource_jvn
https://jvn.jp/en/jp/JVN23340457/index.html
Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://github.com/craigk5n/webcalendar/releases/tag/v1.2.8
Scores
CVSS v3
4.9
EPSS
0.0235
EPSS Percentile
81.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-22
Status
published
Products (2)
k5n.us/WebCalendar
1.2.7 and earlier
webcalendar_project/webcalendar
1.2.7
Published
Aug 29, 2017
Tracked Since
Feb 18, 2026