CVE-2018-12530: Path Traversal
First published: Mon Jun 18 2018(Updated: )
An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to delete arbitrary files via a flienamecsv=../ directory traversal. This can be exploited via CSRF.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Metinfo Metinfo | =6.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-12530.
What is the severity of CVE-2018-12530?
The severity of CVE-2018-12530 is medium (6.5).
What software version is affected by CVE-2018-12530?
MetInfo 6.0.0 is affected by CVE-2018-12530.
How can remote attackers exploit CVE-2018-12530?
Remote attackers can exploit CVE-2018-12530 by deleting arbitrary files via a directory traversal.
Is there a fix available for CVE-2018-12530?
No specific fix information is provided for CVE-2018-12530. It is recommended to update to a fixed version or apply any patches provided by the vendor.
- collector/nvd-index
- vendor/metinfo
- canonical/metinfo metinfo
- version/metinfo metinfo/6.0.0