Back to CVE Browser

CVE-2009-4374

HIGH

7.5

CVSS Severity Score

EPSS Score0.1480%

EPSS Percentile27.95th

PublishedDec 21, 2009

Last ModifiedApr 23, 2026

Vulnerability Description

Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to upload files into arbitrary directories via a .. (dot dot) in the id_document parameter.

Affected Platforms (CPE)

📦

Alienvault

Open Source Security Information Management

<= 2.1.5

References & Advisories

🔗 http://secunia.com/advisories/37727

🔗 http://www.alienvault.com/community.php?section=News

🔗 http://www.cybsec.com/vuln/OSSIM_2_1_5%20_Arbitrary_File_Upload.pdf

🔗 http://secunia.com/advisories/37727

🔗 http://www.alienvault.com/community.php?section=News

🔗 http://www.cybsec.com/vuln/OSSIM_2_1_5%20_Arbitrary_File_Upload.pdf

Related Vulnerabilities

CVE-2009-43737.5

Unrestricted file upload vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Mana...

CVE-2009-43757.5

SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSS...

CVE-2009-43727.5

AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote at...

CVE-2013-53217.5

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attacker...