Unscored CVE-2013-7300 EUVD-2013-7077GHSA-gphq-xrj6-5g4j

Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pathname in a request t…

Published Feb 2, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pathname in a request to the internal httpd server. NOTE: this vulnerability can be leveraged by remote attackers using CVE-2013-7301.

References

https://code.google.com/p/cantata/issues/detail?id=356
[oss-security] 20140120 Re: CVE request: Cantata vulnerability mailing-list
cantata-cve20137300-dir-traversal(90580) vdb-entry
[oss-security] 20140120 CVE request: Cantata vulnerability mailing-list