CVE-2015-3897 Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the theme parameter and a file path in the location parameter....
MediumCVSS 5.0
EPSS 17.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the theme parameter and a file path in the location parameter to bonita/portal/themeResource.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bonitasoft bonita bpm portal | <= 6.5.2 | No fix listed |
References
- packetstormsecurity.com exploit
- 20150610 Arbitrary File Disclosure and Open Redirect in Bonita BPM mailing-list
- www.htbridge.com exploit