An issue was discovered in Sitecore Sitecore.NET 8.1 rev.

Published 8 y ago 2018-04-27 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.5

v3.0 · NVD

CISA KEV

not known exploited

EPSS

16.9%

percentile 97%

Public exploits

Exploit-DB

An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal attack, allowing an attacker to access arbitrary files from the host Operating System using a sitecore/shell/default.aspx?xmlcontrol=LogViewerDetails&file= URI. Validation is performed to ensure that the text passed to the 'file' parameter correlates to the correct log file directory. This filter can be bypassed by including a valid log filename and then appending a traditional 'dot dot' style attack.

Exploit prediction (EPSS)

16.92% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

EDB-45152 Sitecore.Net 8.1 - Directory Traversal · webapps · 2018-08-06

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	7.5	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`
NVD	2.0	7.8	`AV:N/AC:L/Au:N/C:C/I:N/A:N`

Classification

Weakness

CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

exploit-db.com /exploits/45152/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
seclists.org /fulldisclosure/2018/Apr/47 · mailing-list, x_refsource_FULLDISC, x_transferred
kb.sitecore.net /articles/356221 · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2018-7669
NVD: CVE-2018-7669

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.