CVE-2012-1497

MEDIUM · CVSS 4 EPSS 1.85%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-03-03 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-1497

Severity

MEDIUM

CVSS

EPSS

1.85%

Original Filing — NVD Description

The default configuration of Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13 supports the "mt:Include file=" attribute, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files by leveraging the template-designer role.