CVE-2019-9889
21.03.2019, 16:01
In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of the web server.
| Vendor | Product | Version |
|---|---|---|
| vanillaforums | vanilla | 𝑥 < 2.6.4 |
𝑥
= Vulnerable software versions