How severe is CVE-2016-15017?

This vulnerability has a severity rating of CRITICAL with a CVSS score of 9.8 out of 10.

What type of vulnerability is CVE-2016-15017?

This is classified as CWE-21, which is a common weakness in software security.

CVE-2016-15017 - CRITICAL Severity | CVSS 9.8

Vulnerability Description

A vulnerability has been found in fabarea media_upload on TYPO3 and classified as critical. This vulnerability affects the function getUploadedFileList of the file Classes/Service/UploadFileService.php. The manipulation leads to pathname traversal. Upgrading to version 0.9.0 is able to address this issue. The patch is identified as b25d42a4981072321c1a363311d8ea2a4ac8763a. It is recommended to upgrade the affected component. VDB-217786 is the identifier assigned to this vulnerability.

Related Vulnerabilities

CVE-2016-1505

CRITICAL

CVSS:10.0(Critical)

The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.

CWE-212016

CVE-2016-1505

CRITICAL

CVSS:10.0(Critical)

The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.

CWE-212016

CVE-2024-7738

MEDIUM

CVSS:7.8(High)

A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality of the component Markdown File Handler. Th...

CWE-212024

CVE-2015-10030

MEDIUM

CVSS:5.3(Medium)

A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir le...

CWE-212015

CVE-2019-11626

MEDIUM

CVSS:5.3(Medium)

routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request.

CWE-212019

CVE-2014-2232

MEDIUM

CVSS:5.0(Medium)

Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.

CWE-212014