Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2019-3474

Path traversal vulnerability in Filr web application

Description

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Micro Focus Filr

  • 3 to < 3.0 Security Update 6affected

References