CVE-2019-19731 — HIGH (7.5)

Vulnerability Description

Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary locations via the RENAMEFILE action. This can be leveraged for code execution by uploading a specially crafted Windows shortcut file and writing the file to the Startup folder (because an incomplete blacklist of file extensions allows Windows shortcut files to be uploaded).

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Roxyfileman	Roxy Fileman	1.4.5

Related Weaknesses (CWE)

CWE-22

References

http://packetstormsecurity.com/files/155666/Roxy-Fileman-1.4.5-For-.NET-DirectorExploitThird Party AdvisoryVDB Entry
http://www.roxyfileman.com/downloadRelease Notes
http://packetstormsecurity.com/files/155666/Roxy-Fileman-1.4.5-For-.NET-DirectorExploitThird Party AdvisoryVDB Entry
http://www.roxyfileman.com/downloadRelease Notes

FAQ

What is CVE-2019-19731?

CVE-2019-19731 is a vulnerability with a CVSS score of 7.5 (HIGH). Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary locations via the RENAMEFILE action. This can be leveraged for code execution by up...

How severe is CVE-2019-19731?

CVE-2019-19731 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-19731?

Check the references section above for vendor advisories and patch information. Affected products include: Roxyfileman Roxy Fileman.