CVE-2007-5731
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote...
CVE-2007-5731 is a low vulnerability (CVSS 3.5) in Apache Jakarta Slide, published October 30, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.13%, the 94th percentile. No source names a fixed version.
- Severity
- 3.5 LowCVSS 2.0, NVD
- Exploit chance
- 7.13%EPSS, 94th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Jakarta Slide 2.1 RC1 - Remote File Disclosure | 2007-10-24 |
What each source reports
NVD Score used
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461.
- Record
CVE-2007-5731- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE ListNo score
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461.
- Record
CVE-2007-5731- Updated
- 2026-11-02
EUVDEUVD-2007-5702No score
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461.
- Record
EUVD-2007-5702- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h7f5-5qw4-27g2No score
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote...
Absolute path traversal vulnerability in Apache Jakarta Slide 2.1 and earlier allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag, a related issue to CVE-2007-5461.
- Record
GHSA-h7f5-5qw4-27g2- Weakness
- CWE-22
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2007/3699
svn.apache.org/viewvc/jakarta/slide/trunk/src/webdav/server/org/apache/slide/webdav/method/LockMethod.java?view=log&sortby=date&pathrev=590976
osvdb.org/38673
exploit-db.com/exploits/4567
secunia.com/advisories/27467
nvd.nist.gov/vuln/detail/CVE-2007-5731
github.com/advisories/GHSA-h7f5-5qw4-27g2