Description

In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.

Related CPE's

a

jorani

jorani

1.0.0

Vulnerable

References

http://packetstormsecurity.com/files/174248/Jorani-Remote-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

https://github.com/Orange-Cyberdefense/CVE-repository/tree/master

Exploit

https://jorani.org/security-features-in-lms.html

Product

http://packetstormsecurity.com/files/174248/Jorani-Remote-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

https://github.com/Orange-Cyberdefense/CVE-repository/tree/master

Exploit

https://jorani.org/security-features-in-lms.html

Product

Weaknesses

[email protected]

Primary
CWE-22

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-17T19:15:12.143Z

3 years ago

Last modified

2026-06-17T05:43:24.167Z

3 months ago