CVE-2019-10257

HIGH 7.5CVE-2019-10257 · Published 19/06/2019 · updated 17/06/2026

In short

CVE-2019-10257 is a HIGH (CVSS 7.5) vulnerability affecting hr portal (zucchetti).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 83.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hr portal zucchetti	`≤ 2019-03-15`	No fix yet

Description

Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location (dot-dot-slash notation) to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java sources from /WEB-INF/classes/*.class

References

sk-it.com/en/cve.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free