CVE-2018-20789: Tecrail Responsive Filemanager

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a paths[0] path traversal mitigation bypass through the delete_folder action in execute.php.

Affected products

• Tecrail Responsive Filemanager: version 9.13.4 only

Published 2019-02-25. Last modified 2026-06-17.