CVE-2017-8115: Modx Revolution

Medium severity, CVSS 5.3. EPSS: 2.7% chance of exploitation in the next 30 days.

Directory traversal in setup/processors/url_search.php (aka the search page of an unused processor) in MODX Revolution 2.5.7 might allow remote attackers to obtain system directory information.

Affected products

• Modx Modx Revolution: version 2.5.7 only

Published 2017-04-25. Last modified 2026-06-17.