CVE-2014-9375

Publication date

2015-02-16 15:00:00

Family

mitre

State

PUBLISHED

Description

Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. (dot dot) in a file path in a ZIP archive.