CVE-2018-0659 Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create or overwrite existing files via specially crafted ATC file.
MediumCVSS 5.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create or overwrite existing files via specially crafted ATC file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hibara attachecase | <= 2.8.4.0 | No fix listed |
| hibara attachecase | >= 3.0.0.0, <= 3.3.0.0 | No fix listed |
| hibara software AttacheCase | = ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier | No fix listed |
References
- JVN#62121133 third-party-advisory
- hibara.org release-notes vendor-advisory