high7.5
CVE-2018-20789
tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a paths[0] path traversal mitigation bypass …
Impact
tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a paths[0] path traversal mitigation bypass through the delete_folder action in execute.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tecrail | Responsive Filemanager | Version 9.13.4 |