CVE-2020-13818

Directory Traversal validation was being bypassed when using <cachestart>

Vulnerability Details
Impact CVSS V3 rating: NA
Reported 26th May 2020
Reported by Reported by Yazhi Wang of Trend Micro and zerodayinitiative
Fixed June 01, 2020
Affected Builds → Builds till 125143
Fixed in Builds 125144
Overview Directory Traversal validation was being bypassed when using <cachestart>
Recommended Fix

→ For builds 12.5.143 & above, please upgrade to OpUtils version 12.5.144 or above.

 

Description 

Directory Traversal validation was being bypassed when using. This issue has now been fixed.

We recommend that you upgrade to OpUtils version 12.5.144 or contact our support team at oputils-support@manageengine.com to fix this issue.

Source and Acknowledgements

Find out more about CVE-2020-13818 from the CVE dictionary.

Need Help?

For clarification or corrections please contact our support team or email us at oputils-support@manageengine.com