[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmrC69P29DXe5TUzv5DcKFRUxWuoszLFjFGZsv296mHk":3,"g5a-risk:CVE-2014-7237":119},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":41,"references":42,"referencesCount":68,"weaknesses":69,"weaknessesCount":73,"isActivelyExploited":74,"cisaInfo":15,"otxData":15,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":115,"notableEvents":116},"CVE-2014-7237","What is CVE-2014-7237?","lib\u002FTWiki\u002FSandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files with restricted names via a null byte (%00) in a filename to bin\u002Fupload.cgi, as demonstrated using .htaccess to execute arbitrary code.","lib\u002FTWiki\u002FSandbox.pm in TWiki 6.0.0 and earlier, when running on Windows, allows remote attackers to bypass intended access restrictions and upload files wit...","2014-10-16T00:55:06.997","2025-04-12T10:46:40.837",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,6.4,0.20059,[28,28,28,28,28,28,28],"Medium",[32,36],{"vendor":33,"product":33,"version":34,"criteria":35,"vulnerable":4},"twiki","*","cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",2,[43,48,52,56,60,62,64,66],{"url":44,"source":45,"tags":46},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2014\u002FOct\u002F45","Seclists",[47],"Exploit",{"url":49,"source":50,"tags":51},"http:\u002F\u002Ftwiki.org\u002Fcgi-bin\u002Fview\u002FCodev\u002FSecurityAlert-CVE-2014-7237","Twiki",[47],{"url":53,"source":54,"tags":55},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1030982","Securitytracker",[47],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F96952","Ibmcloud",[],{"url":44,"source":45,"tags":61},[47],{"url":49,"source":50,"tags":63},[47],{"url":53,"source":54,"tags":65},[47],{"url":57,"source":58,"tags":67},[],8,[70],{"id":71,"name":71,"description":72},"Unknown","CWE-264",1,false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2014-7237? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-7237, a medium severity cyber security vulnerability from 2014. lib\u002FTWiki\u002FSandbox.pm in TWiki 6.0.0 and earlier, when runn...","CVE-2014-7237, CVE-2014-7237 vulnerability, CVE-2014-7237 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, twiki security, microsoft security, twiki vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2014-7237",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-7237","Cybersecurity","CVE-2014-7237, CVE-2014-7237 vulnerability, CVE-2014-7237 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":103,"Negate":15,"Nodes":104},"AND",[105,111],{"Operator":106,"Negate":15,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":35,"MatchCriteriaID":109,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":110},"514BF8A0-B63B-4767-A80C-0C922BF7DD18","6.0.0",{"Operator":106,"Negate":15,"CPEMatch":112},[113],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":114,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":118,"version":21},1792354845589,{"score":120,"band":30,"action":121,"scoredAt":122},45,"Plan remediation","2026-10-17T07:24:33.102691+00:00"]