Skip to content

CVE-2017-7442 Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.

HighCVSS 8.8 EPSS 40.7% Framework module Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.

Affected products

ProductAffected versionsFixed in
gonitro nitro pro = 11.0.3.173 No fix listed

References

  • srcincite.io exploit third-party-advisory
  • 42418 exploit third-party-advisory vdb-entry