CVE-2013-0136: Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5...

Security readout for executives and security teams

This flaw lets a logged-in remote user abuse path handling in Mutiny’s Frontend EditDocument servlet. Depending on the operation, they may read files, upload and run programs, or delete and rename files. That creates confidentiality, integrity, and availability risk for exposed Mutiny systems. Exposure is most likely where Mutiny versions earlier than 5.0-1.11 are still deployed and the Frontend EditDocument servlet is reachable by authenticated users, especially across less-trusted networks or broad user populations. Treat this as a high-priority legacy exposure issue if Mutiny is present. The requirement for authentication lowers broad internet risk, but the possible outcomes include code execution, data access, and disruption. Mitigation focus: Identify all Mutiny deployments and confirm whether any are before 5.0-1.11.; Upgrade affected Mutiny systems to 5.0-1.11 or later, following vendor guidance.; Restrict Frontend access to trusted users and networks until remediation is complete..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.