HomePentest-Tools.com Logo

Generic HTTP Directory Traversal (Web Dirs) - Active Check CVE-2014-3744CVE-2015-3035CVE-2015-3337CVE-2016-10367CVE-2017-1000028CVE-2017-1000029CVE-2017-14849CVE-2017-16877CVE-2017-6190CVE-2017-9416CVE-2018-10822CVE-2018-1271CVE-2018-16288CVE-2018-16836CVE-2018-3714CVE-2018-3760CVE-2018-6184CVE-2019-12314CVE-2019-14322CVE-2019-18371CVE-2019-3799CVE-2020-23575CVE-2020-35736CVE-2020-5405CVE-2021-23241CVE-2021-3223CVE-2021-40960CVE-2021-41773CVE-2021-42013CVE-2021-43495CVE-2021-43496CVE-2021-43798CVE-2022-23854CVE-2022-24716CVE-2022-31793CVE-2023-34259

Severity
CVSSv3 Score
4.9
Vulnerability description

Generic check for HTTP directory traversal vulnerabilities on each directory of the remote web server.

Risk description

Successfully exploiting this issue may allow an attacker to access paths and directories that should normally not be accessible by a user. This can result in effects ranging from disclosure of confidential information to arbitrary code execution.

Recommendation

Contact the vendor for a solution.

Codename
Not available
Detectable with
Network Scanner
Scan engine
OpenVAS
Exploitable with Sniper
No
CVE Published
Oct 23, 2017
Detection added at
Software Type
Not available
Vendor
Not available
Product
Not available