medium4.3
CVE-2018-7763
The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4.
Impact
The vulnerability exists within css.inc.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The 'css' parameter contains a directory traversal vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | U.Motion Builder | before 1.3.4 |