SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2008-0819

Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include and execute arbitrary local files via a ..

LOW 3.6EPSS 2.27%

Does this matter?

Lower severity and a low EPSS score (2.27%). Track it; it rarely justifies an emergency change on its own.

Description

Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.

CVSS 2.0
3.6 LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
EPSS
2.27% probability · 82th percentile
CISA KEV
Not listed
Weakness
CWE-22
Affected
plutostatus/plutostatus locator
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.