CVE-2018-14927

—

CVSS 3.0

5.3 medium

EPSS

1%p72

Published

Aug 3, 2018 (Aug 3, 2018)

Modified

Jun 17, 2026

Description

Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to system files outside the default application folder) via the /contingency/servlet/ServletFileDownload file parameter, related to /contingency/web/receiptQuery/receiptDisplay.jsp.

Vendors: matera
Products: banco
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.