CVE-2002-1039: Michael Dean Double Choco Latte

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary files via .. (dot dot) sequences when downloading files from the Projects: Attachments feature.

Affected products

• Michael Dean Double Choco Latte: version 2002-01-20 only; version 2002-02-15 only

Published 2002-10-04. Last modified 2026-06-16.