CVE-2018-14927 Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to system files outside the default application folder) via the /contingency/servlet/ServletFileDownload file parameter, related to....
MediumCVSS 5.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to system files outside the default application folder) via the /contingency/servlet/ServletFileDownload file parameter, related to /contingency/web/receiptQuery/receiptDisplay.jsp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| matera banco | = 1.0.0 | No fix listed |
References
- medium.com not-applicable
- exchange.xforce.ibmcloud.com third-party-advisory