CVE-2014-5370

高危 7.5CVE-2014-5370 · Published 21/04/2015 · updated 17/06/2026

要点

CVE-2014-5370 是影响 bluedragon (new atlanta) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：7.5%，高于 94.5% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
bluedragon new_atlanta	`≤ 7.1.1`	No fix yet

Description

Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. (dot dot) in the QUERY_STRING to cfchart.cfchart.

References

packetstormsecurity.com/files/131504/BlueDragon-CFChart-Servlet-7.1.1.17759-Directory-Traversal.html · Exploit
seclists.org/fulldisclosure/2015/Apr/49 · Third Party Advisory
osvdb.org/119527 · Broken Link
exploit-db.com/exploits/36815 · Exploit
portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5370 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free