Vulnerabilities

TI-2019-12820 CVE-2019-17199 · GHSA-v3w4-f27v-2c3p

www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for…

MEDIUM 45

www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of an unanchored regular expression, as demonstrated by the a.jpg\..

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09957 Published 2019-10-05 No fix listed CWE-22

TI-2019-09080 CVE-2019-12161 · GHSA-x8xm-hqh8-g7pw

WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not…

MEDIUM 40

WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses (such as 0300.0250 as a replacement for 192.168).

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01048 Published 2019-05-17 No fix listed CWE-918

Vulnerabilities

Filters

www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for…

WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not…