CVE-2008-4437

HIGH · CVSS 7.1 EPSS 5.64%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-10-03 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2008-4437

Severity

HIGH

CVSS

7.1

EPSS

5.64%

Original Filing — NVD Description

Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path is enabled, allows remote attackers to read arbitrary files via an XML file with a .. (dot dot) in the data element.