CVE-2007-5731

Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote...

3.5 LowPublic exploit

Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461.

Exploit likelihood

7.13%Up 1.3 points since Feb 4, 2022

What each source reports

NVD Score used 3.5

Record: CVE-2007-5731
CVSS 2.0: 3.5 LowAV:N/AC:M/Au:S/C:P/I:N/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-5731
Updated: 2026-11-02

EUVDEUVD-2007-5702 No score

Record: EUVD-2007-5702
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h7f5-5qw4-27g2 No score

Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote...

Record: GHSA-h7f5-5qw4-27g2
Weakness: CWE-22
Updated: 2026-11-02

Affected products

apache jakarta slide

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Jakarta Slide 2.1 RC1 - Remote File Disclosure	2007-10-24

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-5731 is a low vulnerability (CVSS 3.5) in Apache Jakarta Slide, published October 30, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.13%, the 94th percentile. No source names a fixed version.