---
id: 4208
title: "[CVE-2018-19586] Silverpeas 5.15 To 6.0.2: Path Traversal"
cve: CVE-2018-19586
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/silverpeas-5-15-to-6-0-2-advisory"
published_at: "2019-01-15T00:00:00Z"
tags: ["rce", "path-traversal", "vulnerability", "silverpeas", "cve-2018-19586", "web-shell"]
phying_url: "https://phying.com/item/4208"
lang: en
---

# [CVE-2018-19586] Silverpeas 5.15 To 6.0.2: Path Traversal

## Summary

Silverpeas 5.15 to 6.0.2 suffers an authenticated path traversal during file uploads (CVE-2018-19586) that lets regular users plant a JSP web shell and execute commands.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2018-19586
- **Published:** 2019-01-15T00:00:00Z
- **Original:** https://bishopfox.com/blog/silverpeas-5-15-to-6-0-2-advisory
- **Phying News:** https://phying.com/item/4208