CVE-2019-12276: Path Traversal

Published Jun 5, 2019

Updated

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. A patch for this issue was made on 2019-05-30 in GrandNode 4.40.

Affected Software

1 affected component

GrandNode GrandNode=4.40

Event History

Jun 5, 2019

CVE Published

via MITRE·05:30 PM

Data Sourced

via MITRE·05:30 PM

Description

Frequently Asked Questions

What is the severity of CVE-2019-12276?

CVE-2019-12276 is classified as a high-severity path traversal vulnerability.

How do I fix CVE-2019-12276?

To fix CVE-2019-12276, update GrandNode to version 4.41 or later where the vulnerability is patched.

Who is affected by CVE-2019-12276?

CVE-2019-12276 affects users running GrandNode version 4.40.

What does CVE-2019-12276 allow attackers to do?

CVE-2019-12276 allows remote, unauthenticated attackers to retrieve arbitrary files from the web server.

When was CVE-2019-12276 discovered?

CVE-2019-12276 was reported in 2019 and has been subsequently patched in later versions.