Security Advisory

CVE-2008-4437

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-10-03 22:00:00

Last updated 2024-08-07 10:17:09

Assigner mitre

State PUBLISHED

Description

Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path is enabled, allows remote attackers to read arbitrary files via an XML file with a .. (dot dot) in the data element.

← Browse all CVEs View on cve.org ↗