الباحثون
رجوع
Johannes Eger
باحث من
SySS GmbH
#20363
من 60,401
15.3
إجمالي CVSS
الثغرات
·
2
متوسطة
1
عالية
1
PT-2021-21187
2021-08-31
8.8
CVE-2021-36232
Unknown
Mik.Starlight
The issue is related to improper authorization in multiple functions, allowing an authenticated attacker to escalate privileges.
PT-2021-21188
2021-08-31
6.5
CVE-2021-36233
Unknown
Mik.Starlight
The issue allows an authenticated attacker to read arbitrary files from the filesystem by specifying the file path, due to the functionality of the `AdminGetFirstFileContentByFilePath` function.