CVE-2018-20092: Path Traversal
PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-20092?
CVE-2018-20092 is a vulnerability in PTC ThingWorx Platform through version 8.3.0 that allows a directory traversal attack on ZIP files via a POST request.
Who is affected by CVE-2018-20092?
PTC ThingWorx Platform versions 7.0.0 through 8.3.0 are affected by CVE-2018-20092.
What is the severity of CVE-2018-20092?
The severity of CVE-2018-20092 is high, with a severity value of 7.5.
How can I fix CVE-2018-20092?
To fix CVE-2018-20092, users should update their PTC ThingWorx Platform to version 8.3.0 or apply the necessary security patches provided by PTC.
Where can I find more information about CVE-2018-20092?
You can find more information about CVE-2018-20092 on the following websites: [https://www.doyler.net/security-not-included/ptc-thingworx-vulnerability](https://www.doyler.net/security-not-included/ptc-thingworx-vulnerability) and [https://www.ptc.com/en/documents/security/coordinated-vulnerability-disclosure/security-vulnerabilities](https://www.ptc.com/en/documents/security/coordinated-vulnerability-disclosure/security-vulnerabilities).