VIR Vulnerability Intelligence Relay

CVE-2012-1497

medium
Published 2012-03-03 · Modified 2026-04-29
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
4.0

Description

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact
VendorProductVersionsFixed
movabletypemovable_type_open_source{"endIncluding":"4.37"}
movabletypemovable_type_open_source4.0
movabletypemovable_type_open_source4.1
movabletypemovable_type_open_source4.01
movabletypemovable_type_open_source4.2
movabletypemovable_type_open_source4.3
movabletypemovable_type_open_source4.23
movabletypemovable_type_open_source4.25
movabletypemovable_type_open_source4.26
movabletypemovable_type_open_source4.31
movabletypemovable_type_open_source4.32
movabletypemovable_type_open_source4.33
movabletypemovable_type_open_source4.34
movabletypemovable_type_open_source4.35
movabletypemovable_type_open_source4.36
movabletypemovable_type_open_source4.261
movabletypemovable_type_open_source4.361
movabletypemovable_type_open_source5.1
movabletypemovable_type_open_source5.02
movabletypemovable_type_open_source5.03
movabletypemovable_type_open_source5.04
movabletypemovable_type_open_source5.05
movabletypemovable_type_open_source5.06
movabletypemovable_type_open_source5.11
movabletypemovable_type_open_source5.12
movabletypemovable_type_open_source5.031
movabletypemovable_type_open_source5.051
movabletypemovable_type_enterprise{"endIncluding":"4.37"}
movabletypemovable_type_enterprise4.0
movabletypemovable_type_enterprise4.1
movabletypemovable_type_enterprise4.01
movabletypemovable_type_enterprise4.2
movabletypemovable_type_enterprise4.3
movabletypemovable_type_enterprise4.23
movabletypemovable_type_enterprise4.25
movabletypemovable_type_enterprise4.26
movabletypemovable_type_enterprise4.31
movabletypemovable_type_enterprise4.32
movabletypemovable_type_enterprise4.33
movabletypemovable_type_enterprise4.34
movabletypemovable_type_enterprise4.35
movabletypemovable_type_enterprise4.36
movabletypemovable_type_enterprise4.261
movabletypemovable_type_enterprise4.361
movabletypemovable_type_enterprise5.1
movabletypemovable_type_enterprise5.02
movabletypemovable_type_enterprise5.03
movabletypemovable_type_enterprise5.04
movabletypemovable_type_enterprise5.05
movabletypemovable_type_enterprise5.06
movabletypemovable_type_enterprise5.11
movabletypemovable_type_enterprise5.12
movabletypemovable_type_enterprise5.031
movabletypemovable_type_enterprise5.051
movabletypemovable_type_advanced{"endIncluding":"4.37"}
movabletypemovable_type_advanced4.0
movabletypemovable_type_advanced4.1
movabletypemovable_type_advanced4.01
movabletypemovable_type_advanced4.2
movabletypemovable_type_advanced4.3
movabletypemovable_type_advanced4.23
movabletypemovable_type_advanced4.25
movabletypemovable_type_advanced4.26
movabletypemovable_type_advanced4.31
movabletypemovable_type_advanced4.32
movabletypemovable_type_advanced4.33
movabletypemovable_type_advanced4.34
movabletypemovable_type_advanced4.35
movabletypemovable_type_advanced4.36
movabletypemovable_type_advanced4.261
movabletypemovable_type_advanced4.361
movabletypemovable_type_advanced5.1
movabletypemovable_type_advanced5.02
movabletypemovable_type_advanced5.03
movabletypemovable_type_advanced5.04
movabletypemovable_type_advanced5.05
movabletypemovable_type_advanced5.06
movabletypemovable_type_advanced5.11
movabletypemovable_type_advanced5.12
movabletypemovable_type_advanced5.031
movabletypemovable_type_advanced5.051
movabletypemovable_type_pro{"endIncluding":"4.37"}
movabletypemovable_type_pro4.0
movabletypemovable_type_pro4.1
movabletypemovable_type_pro4.01
movabletypemovable_type_pro4.2
movabletypemovable_type_pro4.3
movabletypemovable_type_pro4.23
movabletypemovable_type_pro4.25
movabletypemovable_type_pro4.26
movabletypemovable_type_pro4.31
movabletypemovable_type_pro4.32
movabletypemovable_type_pro4.33
movabletypemovable_type_pro4.34
movabletypemovable_type_pro4.35
movabletypemovable_type_pro4.36
movabletypemovable_type_pro4.261
movabletypemovable_type_pro4.361
movabletypemovable_type_pro5.1
movabletypemovable_type_pro5.02
movabletypemovable_type_pro5.03
movabletypemovable_type_pro5.04
movabletypemovable_type_pro5.05
movabletypemovable_type_pro5.06
movabletypemovable_type_pro5.11
movabletypemovable_type_pro5.12
movabletypemovable_type_pro5.031
movabletypemovable_type_pro5.051

References

CWEs

CWE-22

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.