CVE-2018-19586

CRITICAL Year: 2018
CVSS v3 Score
9.9
Critical
CVSS v2 Score
9.0
Critical
Weakness Type
CWE-22
View all →

Vulnerability Description

Silverpeas 5.15 through 6.0.2 is affected by an authenticated Directory Traversal vulnerability that can be triggered during file uploads because core/webapi/upload/FileUploadData.java mishandles a StringUtil.java call. This vulnerability enables regular users to write arbitrary files on the underlying system with privileges of the user running the application. Especially, an attacker may leverage the vulnerability to write an executable JSP file in an exposed web directory to execute commands on the underlying system.

Related Vulnerabilities

CVE-2018-16367

CRITICAL
CVSS:9.9(Critical)

In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere. A user can write a directory listing to /tmp, and can leak file data with a #include.

CWE-222018

CVE-2018-18809

CRITICAL
CVSS:9.9(Critical)

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperRep...

CWE-222018

CVE-2019-11510

CRITICAL
CVSS:9.9(Critical)

In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary ...

CWE-222019

CVE-2019-13343

CRITICAL
CVSS:9.9(Critical)

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymous user can download any file on servers ...

CWE-222019

CVE-2020-6142

CRITICAL
CVSS:9.9(Critical)

A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP reques...

CWE-222020

CVE-2021-21879

CRITICAL
CVSS:9.9(Critical)

A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary file overwrite. ...

CWE-222021