1. Home
  2. CVE Database
  3. CVE-2018-1000535
HIGH · 7.5

CVE-2018-1000535

lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be e...

Vulnerability Description

lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
LmsLms<= 011123

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2018-1000535?

CVE-2018-1000535 is a vulnerability with a CVSS score of 7.5 (HIGH). lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be e...

How severe is CVE-2018-1000535?

CVE-2018-1000535 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-1000535?

Check the references section above for vendor advisories and patch information. Affected products include: Lms Lms.