Security Advisory

CVE-2019-9889

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-03-20 22:12:27

Last updated 2024-08-04 22:01:55

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of the web server.

← Browse all CVEs View on cve.org ↗