CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through <= 1.1.5.
Explanation of Vulnerability in Simple Terms
Movie Booking versions 1.1.5 and earlier contain a path traversal vulnerability that allows an attacker to cause a denial of service by making the application unavailable. The vulnerability requires no authentication or user interaction and can be exploited over the network. The impact extends beyond the vulnerable component itself.
What an attacker can do
Make the Movie Booking application unavailable or unresponsive.
Potential impact on your site
Your Movie Booking installation could become unavailable to legitimate users without warning.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
