CVE-2013-4861

Published: 2020-01-28T17:15Z

Last Modified: 2024-11-21T01:56Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote authenticated users to read arbirary files via a .. (dot dot) in the filename parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt