Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2019-25355

Genivia gSOAP 2.8 - 'gSOAP' Path Traversal

Description

gSOAP 2.8 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP path traversal techniques. Attackers can retrieve sensitive files like /etc/passwd by sending crafted GET requests with multiple '../' directory traversal sequences.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Genivia Inc. gSOAP

  • 2.8affected

References