CVE-2017-8115: Path Traversal
Directory traversal in setup/processors/urlsearch.php (aka the search page of an unused processor) in MODX Revolution 2.5.7 might allow remote attackers to obtain system directory information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-8115?
The severity of CVE-2017-8115 is classified as moderate due to potential exposure of sensitive system directory information.
How do I fix CVE-2017-8115?
To fix CVE-2017-8115, upgrade MODX Revolution to the latest version where the vulnerability has been patched.
What versions of MODX Revolution are affected by CVE-2017-8115?
CVE-2017-8115 specifically affects MODX Revolution version 2.5.7.
Can I exploit CVE-2017-8115 to gain unauthorized access?
Yes, CVE-2017-8115 can be exploited by remote attackers to obtain system directory information, which may lead to further attacks.
Is CVE-2017-8115 related to other vulnerabilities in MODX?
While CVE-2017-8115 is a specific issue, it's recommended to review other vulnerabilities in similar versions of MODX to ensure overall security.