CVE-2014-125080: faplanet project faplanet

csirt@kutim:~/threat-intel/cve/CVE-2014-125080

CVSS 9.8 · Critical EPSS 0,87%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada faplanet project faplanet. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue. VDB-218398 is the identifier assigned to this vulnerability.

Rincian

Terbit di NVD: 16 Januari 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EPSS (30 hari): 0,87% peluang dieksploitasi; lebih tinggi dari 57,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
faplanet project	faplanet	Semua versi sebelum 2014-05-21

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/frontaccounting/faplanet/commit/a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50 patch
https://vuldb.com/?ctiid.218398 permissions required · advisory pihak ketiga
https://vuldb.com/?id.218398 advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.