CVE-2017-20102

Summary

A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /getImage. The manipulation of the argument filePaht leads to path traversal. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Affected Software

Weaknesses

• CWE-22: CWE-22 Path Traversal

ADP Enrichment

CVE Program Container

Additional References

• https://www.vulnerability-lab.com/get_content.php?id=2033
• https://vuldb.com/?id.97268

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.vulnerability-lab.com/get_content.php?id=2033
• https://vuldb.com/?id.97268

• ←Previous
• Next→