← voltar
CVE-2017-9067

CVE-2017-9067

EPSS 0.8%
In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://citadelo.com/en/2017/04/modx-revolution-cms/https://github.com/modxcms/revolution/pull/13422https://github.com/modxcms/revolution/pull/13428