CVE-2017-17793

Name: CVE-2017-17793
Creator: NVD / NIST
Published: 2017-12-20T09:29:01.693+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.93%

Last modified Jun 17, 2026

CVE-2017-17793 is a vulnerability of currently unknown severity. Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename).. EPSS estimates a 1.93% chance of exploitation in the next 30 days.

Description

Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename).

Metrics

EPSS Probability

1.93%

77.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-200

Affected Software

Vendor	Product	Versions
Blogotext Project	Blogotext	<= 3.7.6

References

https://github.com/BlogoText/blogotext/commit/101dc1d37010a1d877d6961ed2f32d089c708e91Patch
https://github.com/BlogoText/blogotext/issues/345Issue Tracking, Third Party Advisory
https://github.com/BlogoText/blogotext/commit/101dc1d37010a1d877d6961ed2f32d089c708e91Patch
https://github.com/BlogoText/blogotext/issues/345Issue Tracking, Third Party Advisory

Timeline

Published: Dec 20, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-17793?

How severe is CVE-2017-17793?

Severity scoring for CVE-2017-17793 is pending analysis. The EPSS model estimates a 1.93% probability of exploitation in the next 30 days.

How do I fix CVE-2017-17793?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-17793?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST