CVE-2018-12524

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /lib/ provides a directory listing.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 18, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-125255.3An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /images/ provides a directory lCVE-2018-125269.8Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device viCVE-2018-125288.1An issue was discovered on Intex N150 devices. The backup/restore option does not check the file extension uploaded for importing a configurCVE-2018-125298.8An issue was discovered on Intex N150 devices. The router firmware suffers from multiple CSRF injection point vulnerabilities including chanCVE-2018-12536.1RSA Authentication Manager Operation Console, versions 8.3 P1 and earlier, contains a stored cross-site scripting vulnerability. A maliciousCVE-2018-125306.5An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to delete arbitrary files via a flienamecsv=../ CVE-2018-125319.8An issue was discovered in MetInfo 6.0.0. install\index.php allows remote attackers to write arbitrary PHP code into config_db.php, a differCVE-2018-125329.8JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapperCVE-2018-125339.8JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitCVE-2018-125349.8A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress.CVE-2018-125365.3In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doCVE-2018-125375.3In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and lin
CVE-2018-12524: Medium severity, CVSS 5.3 | Vulnix