CVE-2017-20152

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in aerouk imageserve. Affected is an unknown function of the file public/viewer.php of the component File Handler. The manipulation of the argument filelocation leads to path traversal. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is bd23c784f0e5cb12f66d15c100248449f87d72e2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217056.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Dec 30, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-201536.1A vulnerability has been found in aerouk imageserve and classified as problematic. Affected by this vulnerability is an unknown functionalit CVE-2017-201547.5A vulnerability was found in ghostlander Phoenixcoin. It has been classified as problematic. Affected is the function CTxMemPool::accept of CVE-2017-201556.1A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vu CVE-2017-201569.8A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer CVE-2017-201579.8A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the CVE-2017-201586.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in vova07 Yii2 FileAPI Widget up to 0.1.8. It has been declared as problematic. Af CVE-2017-201596.1A vulnerability was found in rf Keynote up to 0.x on Rails. It has been rated as problematic. Affected by this issue is some unknown functio CVE-2017-201609.8A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file li CVE-2017-201617.8A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c CVE-2017-201625.3A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the fi CVE-2017-201639.8A vulnerability has been found in Red Snapper NView and classified as critical. This vulnerability affects the function mutate of the file s CVE-2017-201646.1A vulnerability was found in Symbiote Seed up to 6.0.2. It has been classified as critical. Affected is the function onBeforeSecurityLogin o