CVE-2014-125080

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-125080
A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue. VDB-218398 is the identifier assigned to this vulnerability.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 3.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

5.2 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:A/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 5.1 / Impact : 6.4

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://github.com/frontaccounting/faplanet/commit/a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50 Patch
https://vuldb.com/?ctiid.218398 Permissions Required Third Party Advisory
https://vuldb.com/?id.218398 Third Party Advisory
https://github.com/frontaccounting/faplanet/commit/a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50 Patch
https://vuldb.com/?ctiid.218398 Permissions Required Third Party Advisory
https://vuldb.com/?id.218398 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:faplanet_project:faplanet:*:*:*:*:*:*:*:*
History

21 Nov 2024, 02:03

Type Values Removed Values Added
CVSS v2 : 5.2
v3 : 9.8 		v2 : 5.2
v3 : 5.5
References () https://github.com/frontaccounting/faplanet/commit/a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50 - Patch () https://github.com/frontaccounting/faplanet/commit/a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50 - Patch
References () https://vuldb.com/?ctiid.218398 - Permissions Required, Third Party Advisory () https://vuldb.com/?ctiid.218398 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.218398 - Third Party Advisory () https://vuldb.com/?id.218398 - Third Party Advisory

08 Dec 2023, 20:14

Type Values Removed Values Added
References (MISC) https://vuldb.com/?id.218398 - Permissions Required, Third Party Advisory (MISC) https://vuldb.com/?id.218398 - Third Party Advisory

07 Nov 2023, 02:18

Type Values Removed Values Added
CWE CWE-22

20 Oct 2023, 07:15

Type Values Removed Values Added
CWE CWE-22
Summary A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The name of the patch is a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue. VDB-218398 is the identifier assigned to this vulnerability. A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue. VDB-218398 is the identifier assigned to this vulnerability.
Information

Published : 2023-01-16 18:15

Updated : 2024-11-21 02:03

NVD link : CVE-2014-125080

Mitre link : CVE-2014-125080

CVE.ORG link : CVE-2014-125080

JSON object : View

Products Affected

faplanet_project

  • faplanet
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')