CVE-2019-16384

PoC —

CVSS 3.1

6.5 medium

EPSS

1%p63

Published

Jun 4, 2020 (Jun 4, 2020)

Modified

Jun 17, 2026

Description

Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables files outside of the web directory to be retrieved if the exact location is known and the user has permissions.

Vendors: cybelesoft
Products: thinfinity virtualui
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.