CVE-2009-1773

EPSS 0.28%
Published 22.05.2009 18:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re_route parameter to the login script, which reveals the installation path in an error message.

Affected products Warnungen 0 Metrics 2 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Activecollab ≫ Activecollab Version2.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.28%	0.487

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html

http://secunia.com/advisories/35079

Vendor Advisory

http://www.securityfocus.com/bid/35022

https://nvd.nist.gov/vuln/detail/CVE-2009-1773

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1773

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1773

EUVD