Vulnerability Details CVE-2017-12586
SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exploited by remote authenticated librarian users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.3%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
Products affected by CVE-2017-12586
-
cpe:2.3:a:slims:akasia:8.0
-
cpe:2.3:a:slims:akasia:8.1
-
cpe:2.3:a:slims:akasia:8.2
-
cpe:2.3:a:slims:akasia:8.3
-
cpe:2.3:a:slims:akasia:8.3.1