CVE-2019-13157: Path Traversal

Published Nov 22, 2019

Updated

nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename within nsz archive.

Affected Software

1 affected component

NAVER Vaccine=2.1.4

Event History

Nov 22, 2019

CVE Published

via MITRE·02:06 AM

Data Sourced

via MITRE·02:06 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-13157?

CVE-2019-13157 is a vulnerability in the Naver Vaccine 2.1.4 software that allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within an nsz archive.

How severe is CVE-2019-13157?

CVE-2019-13157 has a severity rating of 7.5 out of 10, making it a high-severity vulnerability.

What software versions are affected by CVE-2019-13157?

CVE-2019-13157 affects version 2.1.4 of Naver Vaccine.

How can I fix CVE-2019-13157?

To fix CVE-2019-13157, it is recommended to update Naver Vaccine to a version that includes a patch for this vulnerability.

Where can I find more information about CVE-2019-13157?

More information about CVE-2019-13157 can be found at the following reference: [CVE-2019-13157](https://cve.naver.com/detail/cve-2019-13157).