CVE-2015-4425
pimcore pimcore: no CVSS score yet. EPSS 3.8% chance of exploitation in the next 30 days.
Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. (dot dot) in the dir parameter to admin/asset/add-asset-compatibility.
- EPSS
- 3.8% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pimcore:pimcore
References
- http://seclists.org/fulldisclosure/2015/Jul/57
- https://github.com/pimcore/pimcore/commit/4f2a95f877d406a054f9f2253475fe58c76aa03d
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-4425/
- http://seclists.org/fulldisclosure/2015/Jul/57
- https://github.com/pimcore/pimcore/commit/4f2a95f877d406a054f9f2253475fe58c76aa03d