CVE-2014-2575: Path Traversal
Published Jun 6, 2014
·Updated
Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x before 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. (dot dot) in the EVENTARGUMENT parameter.
Affected Software
62 affected components
DevExpress Aspxfilemanager Control For Webforms And Mvc<=13.1.9
DevExpress Aspxfilemanager Control For Webforms And Mvc=10.2
DevExpress Aspxfilemanager Control For Webforms And Mvc=10.2.3
DevExpress Aspxfilemanager Control For Webforms And Mvc=10.2.4
DevExpress Aspxfilemanager Control For Webforms And Mvc=10.2.5
DevExpress Aspxfilemanager Control For Webforms And Mvc=10.2.6
DevExpress Aspxfilemanager Control For Webforms And Mvc=10.2.8
DevExpress Aspxfilemanager Control For Webforms And Mvc=10.2.9
DevExpress Aspxfilemanager Control For Webforms And Mvc=10.2.10
DevExpress Aspxfilemanager Control For Webforms And Mvc=10.2.11
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.1
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.1.4
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.1.5
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.1.6
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.1.7
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.1.8
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.1.9
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.1.10
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.1.11
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.1.12
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.2
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.2.5
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.2.7
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.2.8
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.2.10
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.2.11
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.2.12
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.2.13
DevExpress Aspxfilemanager Control For Webforms And Mvc=11.2.14
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.1
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.1.4
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.1.5
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.1.6
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.1.7
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.1.8
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.1.9
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.1.10
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.1.11
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.1.12
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.4
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.5
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.6
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.7
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.8
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.10
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.11
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.12
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.13
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.15
DevExpress Aspxfilemanager Control For Webforms And Mvc=12.2.16
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.1
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.1.4
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.1.5
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.1.6
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.1.7
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.1.8
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.2
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.2.5
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.2.6
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.2.7
DevExpress Aspxfilemanager Control For Webforms And Mvc=13.2.8
Event History
Jun 6, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2575?
CVE-2014-2575 has been classified as a medium severity vulnerability due to its potential to allow unauthorized access to sensitive files.
2
How do I fix CVE-2014-2575?
To fix CVE-2014-2575, update the DevExpress ASPxFileManager Control to version 13.1.10 or later.
3
What software is affected by CVE-2014-2575?
CVE-2014-2575 affects DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC in versions prior to 13.1.10 and certain 13.2.x versions.
4
Can CVE-2014-2575 be exploited by unauthenticated users?
No, CVE-2014-2575 requires remote authenticated users to exploit the directory traversal vulnerability.
5
What are the potential impacts of CVE-2014-2575?
The impacts of CVE-2014-2575 include the ability for attackers to read or write arbitrary files on the server.