CVE-2017-10907 Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| spiqe onethird cms show off | <= 1.85 | No fix listed |
| SpiQe Software OneThird CMS | = Show Off v1.85 and earlier | No fix listed |
| SpiQe Software OneThird CMS | = Show Off v1.85 en and earlier | No fix listed |
References
- JVN#93333702 third-party-advisory vdb-entry
- onethird.net vendor-advisory