CVE-2018-20092

HIGH

PTC ThingWorx <8.3.0 - Path Traversal

Title source: llm

PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.

Core 2

Core References

Vendor Advisory x_refsource_confirm

Various Sources x_refsource_misc

CVSS v3 7.5

EPSS 0.0218

EPSS Percentile 80.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-22

Status published

Products (2)

ptc/thingworx_platform 8.3.0

ptc/thingworx_platform 7.0.0 - 7.0.14

Published Dec 17, 2018

Tracked Since Feb 18, 2026