https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:57:29 +0000 https://vulnerability.circl.lu/vuln/cnvd-2017-05311 cnvd-2017-05311 https://vulnerability.circl.lu/vuln/cnvd-2017-05311 https://vulnerability.circl.lu/vuln/fkie_cve-2017-5869 <p>Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a .. (dot dot) in the X-File-Name header.</p> <p>Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a .. (dot dot) in the X-File-Name header.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2017-5869 https://vulnerability.circl.lu/vuln/ghsa-r32w-jwh3-hc96 <p>Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a .. (dot dot) in the X-File-Name header.</p> <p>Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to upload and execute arbitrary JSP code via a .. (dot dot) in the X-File-Name header.</p> https://vulnerability.circl.lu/vuln/ghsa-r32w-jwh3-hc96 https://vulnerability.circl.lu/vuln/gsd-2017-5869 gsd-2017-5869 https://vulnerability.circl.lu/vuln/gsd-2017-5869