Vulnerability in Extplorer

CVE-2012-3454

eXtplorer 2.1.0b6 uses world writable permissions for the /var/lib/extplorer/ftp_tmp directory, which allows local users to delete or overwrite arbitrary files.

EPSS: 0.003 (22.3th percentile) — read the EPSS interpretation.

Affected products

  • Extplorer — versions 2.1.0
  • N/a — versions n/a

Weakness classification (CWE)

References