CVE-2014-2863

critical

Published 2014-04-15 · Modified 2026-05-06

CVSS v3

—

CVSS v2

10.0

VIR risk

10.0

Description

Multiple absolute path traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to have an unspecified impact via a full pathname in a parameter.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact

Vendor	Product	Versions
paperthin	commonspot_content_server	`{"endIncluding":"7.0.1"}`
paperthin	commonspot_content_server	`8.0.0`
paperthin	commonspot_content_server	`8.0.1`
paperthin	commonspot_content_server	`8.0.2`

References

http://www.kb.cert.org/vuls/id/437385
http://www.kb.cert.org/vuls/id/437385

CWEs

CWE-22

Verify integrity in audit chain (admin only). AS-IS.