Описание
Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до IFTOP_P3_2_1_197 (исключая)
cpe:2.3:a:wellchoose:organization_portal_system:*:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00061
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-36
CWE-22
Связанные уязвимости
CVSS3: 6.5
github
16 дней назад
Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
EPSS
Процентиль: 19%
0.00061
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-36
CWE-22