Cyber Resilience

CVE-2014-125069

Medium

Published: 08 January 2023

Published
08 January 2023
Modified
21 November 2024
KEV Added
Patch
CVSS Score v3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score 0.0044 63.8th percentile
Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2014-125069 is a medium-severity Exposure of Information Through Directory Listing (CWE-548) vulnerability in Maps-Js-Icoads Project Maps-Js-Icoads. Its CVSS base score is 4.3 (Medium).

Operationally, ranked in the top 36.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A vulnerability was found in saxman maps-js-icoads. It has been classified as problematic. Affected is an unknown function. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The name of the…

more

patch is 34b8b0cce2807b119f4cffda2ac48fc8f427d69a. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217644.

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

maps-js-icoads project
maps-js-icoads
≤ 09-02-2014

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-548

Detects information exposure through directory listings as unauthorized disclosure.

addresses: CWE-548

Directory listings and resource enumeration can be suppressed or populated with misleading entries.

addresses: CWE-548

Reduces exposure via directory listings or accessible files when OPSEC restricts visibility of key organizational resources.

addresses: CWE-22

Validates pathnames and filenames to prevent traversal outside intended directories.

References