medium4.9
CVE-2017-10841
Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors.
Impact
Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webcalendar Project | Webcalendar | Version 1.2.7 |