CVE-2019-12276

ALTO 7.5CVE-2019-12276 · Published 05/06/2019 · updated 17/06/2026

En resumen

CVE-2019-12276 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a grandnode (grandnode).
Probabilidad de explotación en los próximos 30 días (EPSS): 60.1%, mayor que el 99.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
grandnode grandnode	`= 4.40`	No fix yet

Description

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. A patch for this issue was made on 2019-05-30 in GrandNode 4.40.

References

packetstormsecurity.com/files/153373/GrandNode-4.40-Path-Traversal-File-Download.html
grandnode/grandnode · Third Party Advisory
grandnode.com · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free