CVE-2015-4425
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 3.8%
from disclosure to weaponsame day
Published on NVDAug 18
1st PoCJul 14
Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. (dot dot) in the dir parameter to admin/asset/add-asset-compatibility.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/37609unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.