CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Jeroen Berkvens SSV Events ssv-events allows PHP Local File Inclusion.This issue affects SSV Events: from n/a through <= 3.2.7.
Explanation of Vulnerability in Simple Terms
SSV Events versions 3.2.7 and earlier contain a path traversal vulnerability that allows an attacker to read arbitrary files from the server. The vulnerability requires user interaction—the victim must visit a malicious link or page. Successful exploitation can expose sensitive data, modify files, or disrupt service availability.
What an attacker can do
Read, modify, or delete arbitrary files on the server; access sensitive configuration and database files.
Potential impact on your site
Attackers can steal database credentials, configuration secrets, and user data; potentially take over the site.
Conditions required to exploit
Victim must click a malicious link or visit an attacker-controlled page; no authentication required.
Key dates
External resources
Related vulnerabilities
