Medium severity6.5NVD Advisory· Published Jun 4, 2020· Updated Jun 17, 2026
CVE-2019-16384
CVE-2019-16384
Description
Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables files outside of the web directory to be retrieved if the exact location is known and the user has permissions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:cybelesoft:thinfinity_virtualui:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cybelesoft:thinfinity_virtualui:*:*:*:*:*:*:*:*range: <=2.5.17.2
- (no CPE)range: = 2.5.17.2
- Cybele/Thinfinity VirtualUIdescription
Patches
Vulnerability mechanics
References
1- labs.nettitude.com/blog/cve-2019-16384-85-cyblesoft-thinfinity-virtualui-path-traversal-http-header-injection/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.