CVE-2015-2971 Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string.
MediumCVSS 5.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seeds acmailer | < 3.8.18 | 3.8.18 |
| seeds acmailer | = 3.9.0-beta | No fix listed |
| seeds acmailer | = 3.9.1-beta | No fix listed |
| seeds acmailer | = 3.9.2-beta | No fix listed |
| seeds acmailer | = 3.9.3-beta | No fix listed |
| seeds acmailer | = 3.9.4-beta | No fix listed |
| seeds acmailer | = 3.9.5-beta | No fix listed |
| seeds acmailer | = 3.9.6-beta | No fix listed |
| seeds acmailer | = 3.9.7-beta | No fix listed |
| seeds acmailer | = 3.9.8-beta | No fix listed |
| seeds acmailer | = 3.9.9-beta | No fix listed |
| seeds acmailer | = 3.9.10-beta | No fix listed |
| seeds acmailer | = 3.9.11-beta | No fix listed |
References
- JVN#64051989 third-party-advisory vendor-advisory
- JVNDB-2015-000098 third-party-advisory vendor-advisory
- www.acmailer.jp vendor-advisory