Unrated

KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindeditor/attached/...

CVE-2018-18950 First seen on SecPulse Nov 5, 2018

Original description The description as published by the source.

KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report github.com

Key facts

Severity: Unrated
Published: Nov 5, 2018
First seen on SecPulse: Nov 5, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50