CVE-2016-1610

CVSS 7.5 - HIGH
Description

Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. (dot dot) in a blob name.

Affected Products
2
Vendor Product Version
novell filr All versions
novell filr All versions
Weakness Types
CWE-22
CVE Information
CVE ID:
CVE-2016-1610
Published:
2016-08-01
Modified:
2026-05-06
CVSS Score:
7.5
Severity:
HIGH
Vector:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Vendors
novell
Quick Actions
CVSS Severity Scale
0.0 - 3.9 LOW
4.0 - 6.9 MEDIUM
7.0 - 8.9 HIGH
9.0 - 10.0 CRITICAL