CVE-2017-14196 An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a Path Traversal issue in the 'File Bridge' plugin allowed the existence of files o...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a Path Traversal issue in the 'File Bridge' plugin allowed the existence of files outside of the bridged path to be confirmed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squiz matrix | >= 5.3.0.0, <= 5.3.6.1 | No fix listed |
| squiz matrix | = 5.4.1.3 | No fix listed |
References
- devalias.net issue-tracking third-party-advisory