CVE-2017-20145

MEDIUM

Tecrail Responsive Filemanger <9.10.x - Path Traversal

Title source: llm
STIX 2.1

Description

A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.11.0 is able to address this issue. It is recommended to upgrade the affected component.

References (2)

Core 2
Core References
Exploit, Mailing List, Third Party Advisory x_refsource_misc
http://seclists.org/fulldisclosure/2017/Feb/19
Third Party Advisory x_refsource_misc
https://vuldb.com/?id.96818

Scores

CVSS v3 6.3
EPSS 0.0085
EPSS Percentile 53.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (1)
tecrail/responsive_filemanager < 9.11.0
Published Jul 25, 2022
Tracked Since Feb 18, 2026