CVE-2016-4314

PoC ×3—

CVSS 3.0

4.9 medium

EPSS

12%p96

Published

Feb 17, 2017 (Feb 17, 2017)

Modified

Jun 17, 2026

Description

Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the logFile parameter to downloadgz-ajaxprocessor.jsp.

Vendors: wso2
Products: carbon
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (12.4%)

In the news0 stories

No ingested article mentions this CVE yet.