CVE-2019-15714
—CVSS 3.0
5.3 medium
EPSS
2%p77
Published
()
Modified
Description
cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations.
- Vendors
- entropic project
- Products
- entropic
- Weakness
- CWE-22
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.