CVE-2019-3474

MEDIUM

Path traversal vulnerability in Filr web application

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-3474 has a selected CVSS score of 6.5 (medium); EIP currently links 1 catalogued exploit.

Description

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

Filr

Browse Micro Focus / Filr
CVE List3 to < 3.0 Security Update 6affected

Proofs of concept

1

Catalogued exploits

ExploitDBMicro Focus Filr 3.4.0.217 - Path Traversal / Local Privilege EscalationExploitDB exploitby SecureAuthNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB
PoC details

References

4