ByteOS Network

NVD Vulnerability Details :

CVE-2019-11397

Modified

Source-cve@mitre.org

Published At-14 May, 2019 | 21:29

Updated At-14 Feb, 2024 | 01:17

GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 (when used with .NET Framework 4.5) allows Local File Inclusion via the FileDesc parameter.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N

CPE Matches

rapidflows>>rapid4>>4.5m.23

cpe:2.3:a:rapidflows:rapid4:4.5m.23:*:*:*:*:*:*:*

Microsoft Corporation

>>.net_framework>>4.5

cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-22	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://rapidflows.com/	cve@mitre.org	Product Vendor Advisory URL Repurposed
https://medium.com/%40javarmutt/rapid4-local-file-inclusion-0day-151c830ac74a	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History