CVE-2017-2150: Path Traversal
Published Apr 28, 2017
·Updated
Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captchachalange parameter.
Affected Software
1 affected component
Booking Calendar Project Booking Calendar Wordpress<=7.0
Event History
Apr 28, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-2150?
CVE-2017-2150 is classified as a high severity vulnerability due to its potential for remote file access.
2
How do I fix CVE-2017-2150?
To fix CVE-2017-2150, update Booking Calendar to version 7.1 or later.
3
Which versions of Booking Calendar are affected by CVE-2017-2150?
Booking Calendar versions 7.0 and earlier are affected by CVE-2017-2150.
4
What type of attack can CVE-2017-2150 allow?
CVE-2017-2150 allows remote attackers to perform directory traversal attacks to read arbitrary files.
5
Is there any workaround for CVE-2017-2150?
There are no official workarounds for CVE-2017-2150 other than updating to a secured version.