CVE-2019-19372: Path Traversal
Published Nov 28, 2019
·Updated
DISPUTED A downloadFile.php downloadfile path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially download files. NOTE: the discoverer later reported that there was not a "fully working exploit."
Affected Software
1 affected component
rConfig rConfig<=3.9.3
Event History
Nov 28, 2019
CVE Published
via MITRE·02:57 PM
Data Sourced
via MITRE·02:57 PM
Description
Disputed
03:15 PM
Frequently Asked Questions
1
What is CVE-2019-19372?
CVE-2019-19372 is a download_file path traversal vulnerability in rConfig through version 3.9.3.
2
What is the severity of CVE-2019-19372?
The severity of CVE-2019-19372 is high with a CVSS score of 7.5.
3
How does CVE-2019-19372 affect rConfig?
CVE-2019-19372 allows attackers to list files in arbitrary folders and potentially download files in rConfig.
4
Is there a fully working exploit for CVE-2019-19372?
No, the discoverer reported that there was not a fully working exploit for CVE-2019-19372.
5
How can I fix CVE-2019-19372?
Upgrade rConfig to a version beyond 3.9.3 to fix CVE-2019-19372.