Back to Database
Status published
Medium
CVE-2019-17324
ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by...
Vulnerability Description
ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters. This could lead to create malicious HTML file, because they can inject a content with crafted template. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-17324
Credits & Attribution
No credits recorded in the NVD database.
More from ClipSoft
View All →CVE-2019-17326
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to...
Medium
6.5
CVE-2019-17325
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to...
Medium
6.5
CVE-2019-17323
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation...
High
8.8
CVE-2019-17322
ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation...
Medium
6.5
CVE-2019-17321
ClipSoft REXPERT 1.0.0.527 and earlier version have an information disclosure...
Medium
5.3
Affected Vendor
ClipSoft
View all reports →Affected Software
REXPERT
Vulnerable Versions:
1.0.0.527 and earlier
Timeline
Official Publish:
October 30th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N