CVE-2019-1010205

Name of the Vulnerable Software and Affected Versions: LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff)

Description: The issue allows an attacker to access any file with a fixed extension on the server. This is due to a Directory Traversal flaw in the web-view renderer component. The attack vector involves sending a specially crafted HTTP request.

Recommendations: For LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff), consider restricting access to the web-view renderer component until a fix is available. As a temporary workaround, restrict the handling of specially crafted HTTP requests to minimize the risk of exploitation.