Unauthenticated File Disclosure Vulnerability in Zeta Producer Desktop CMS

Unauthenticated File Disclosure Vulnerability in Zeta Producer Desktop CMS

CVE-2018-13980 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is installed, because of assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal.

Learn more about our Cis Benchmark Audit For Desktop Software.