CVE catalog
CVE-2019-7305
UBUNTU-CVE-2019-7305
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.83% · Oct 27, 2026
Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile patch file debian/patches/debian-changes-2.1.0b6+dfsg-1 or debian/patches/adds-a-makefile.patch, this can lead to data leakage, information disclosure and potentially remote code execution on the web server. This issue affects all versions of eXtplorer in Ubuntu and Debian
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | extplorer | 16.04 | 2.1.0b6+dfsg.3-4+deb7u1 | vulnerable |
| Ubuntu | extplorer | 16.04 | 2.1.0b6+dfsg.3-4+deb7u1ubuntu1 | vulnerable |
| Ubuntu | extplorer | 16.04 | 2.1.0b6+dfsg.3-4+deb7u3ubuntu0.1 | vulnerable |
| Ubuntu | extplorer | 16.04 | 2.1.0b6+dfsg.3-4+deb7u4ubuntu0.16.04.1 | vulnerable |
| Ubuntu | extplorer | 16.04 | 2.1.0b6+dfsg.3-4+deb7u5ubuntu0.16.04.1 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: