VULNERABILITY INTELLIGENCE

CVE-2009-4800

CVSS score4 MEDIUM
EPSS probability1.93%
CISA KEVNot currently listed
Published2010-04-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:N

Description

Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references