CVE-2019-15517

medium

Description

jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal.

References

https://github.com/jc21/nginx-proxy-manager/pull/114

https://github.com/jc21/nginx-proxy-manager/compare/2.0.12...2.0.13

Details

Source: Mitre, NVD

Published: 2019-08-23

Updated: 2019-08-27

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium