What the vulnerability does
01Description
In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests for a limited number of file types.
CVSS base score
—
Key dates
02Disclosure timeline
April 9, 2019
CVE published
August 4, 2024
Record updated
External resources
