CVE-2017-2117

4.9 mediumEPSS 2.1%

Medium (4.9) in cubecart cubecart. EPSS 2.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors.

Severity

CVSS 3.0

4.9 medium

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2017-04-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cubecart:cubecart

References

http://jvn.jp/en/jp/JVN63474730/index.html
http://www.securityfocus.com/bid/96466
https://forums.cubecart.com/topic/52188-cubecart-615-released/
http://jvn.jp/en/jp/JVN63474730/index.html
http://www.securityfocus.com/bid/96466

Check your stack JSON