CVE-2019-25097: soerennb eXtplorer Directory Content path traversal

Q: What is the severity of CVE-2019-25097?

CVE-2019-25097 is classified as a critical vulnerability.

Q: How do I fix CVE-2019-25097?

To fix CVE-2019-25097, upgrade eXtplorer to version 2.1.13 or later.

Q: What components are affected by CVE-2019-25097?

CVE-2019-25097 affects the Directory Content Handler component of eXtplorer.

Q: What type of vulnerability is CVE-2019-25097?

CVE-2019-25097 is a path traversal vulnerability.

Q: What can happen if CVE-2019-25097 is exploited?

Exploitation of CVE-2019-25097 could allow unauthorized access to file paths on the server.

Published Jan 5, 2023

Updated

A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the component Directory Content Handler. The manipulation leads to path traversal. Upgrading to version 2.1.13 is able to address this issue. The name of the patch is b8fcb888f4ff5e171c16797a4b075c6c6f50bf46. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217436.

Affected Software

1 affected component

eXtplorer extplorer<2.1.13

Remediation

Patch Available

https://github.com/soerennb/extplorer/commit/b8fcb888f4ff5e171c16797a4b075c6c6f50bf46

Event History

Jan 5, 2023

CVE Published

07:58 AM

Data Sourced

07:58 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-25097?

CVE-2019-25097 is classified as a critical vulnerability.

How do I fix CVE-2019-25097?