PT-2021-21659
CVE-2021-37446
·
تاريخ النشر
2021-07-25
·
تاريخ التحديث
2021-08-04
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
NCH Quorum versions 2.03 and earlier
Description
The issue allows an authenticated user to perform directory traversal, enabling file reading. This is achieved via the "documentprop?file=/.." endpoint.
Recommendations
For NCH Quorum versions 2.03 and earlier, consider restricting access to the "documentprop?file=/.." endpoint to prevent directory traversal attacks until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾