« Volver al listado

CVE-2015-8276

Estado: ModificadaMedia (5.5)—

LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to read arbitrary files via crafted EDOC files.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Eparaksts — Edoc-librariesEparaksts — Eparakstitajs 3

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-8276",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01",
          "versions": [
            {
              "status": "affected",
              "version": "LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-04-10T03:59:01.060",
  "references": [
    {
      "url": "https://cert.lv/en/2016/01/new-cve-information-avialable",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "https://cert.lv/en/2016/01/new-cve-information-avialable",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "LVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to read arbitrary files via crafted EDOC files."
    },
    {
      "lang": "es",
      "value": "LVRTC eParakstitajs 3.0 (1.3.0) y edoc-libraries-2.5.4_01 permiten a atacantes leer archivos arbitrarios a través de archivos EDOC manipulados."
    }
  ],
  "lastModified": "2026-06-17T00:34:15.013",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:eparaksts:edoc-libraries:2.5.4_01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F084BDA2-C571-42E8-92CC-B9B8A9730064"
            },
            {
              "criteria": "cpe:2.3:a:eparaksts:eparakstitajs_3:1.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06E27E83-155C-471C-861B-94C03ECA7FC6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}