Path Traversal in Konakart
CVE-2017-17108
Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to download system files, as well as upload specially crafted JSP files and in turn gain access to the server.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.022 (80.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Konakart
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
Frequently asked questions
- What is CVE-2017-17108?
- CVE-2017-17108 is a critical-severity vulnerability in Konakart, classified under Path Traversal. CVSS score: 9.8/10. Published 2018-02-03.
- How severe is CVE-2017-17108?
- Critical severity. CVSS v3 base score is 9.8 out of 10.