peter bassill · operator
$ cve CVE-2002-0325 JSON

CVE-2002-0325 EXPLOIT

5.0
MEDIUM · CVSS 2.0 · EPSS 37.8% (pctl 98)

Patch early

A public exploit exists.

Description

Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.

Scoring

CVSS5.0 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS37.78% — more likely to be exploited than 98% of all CVEs
On CISA KEVno
Public exploityes
Published2002-06-25
Last modified2026-06-16

Affected (1)

VendorProduct
working resources inc.badblue

Public exploits

SourceTitleDate
exploit-dbWorking Resources BadBlue 1.5/1.6 - Directory Traversal2002-02-26

References

→ the Explorer  ·  watch your stack  ·  NVD