Vulnerability in Microsoft Internet Explorer

CVE-2001-0089

Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability.

EPSS: 0.145 (96.3th percentile) — read the EPSS interpretation.

Affected products

Microsoft Internet_explorer — versions 5.0, 5.01
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MS, vendor-advisory)