Unrated

BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\ substring, a...

CVE-2018-17341 First seen on SecPulse Sep 23, 2018

Original description The description as published by the source.

BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\ substring, as demonstrated by a launch.php?bigtree_htaccess_url=admin/images/..\ URI.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report github.com

Key facts

Severity: Unrated
Published: Sep 23, 2018
First seen on SecPulse: Sep 23, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50