Researchers
Back
Johannes Eger
Researcher from
SySS GmbH
#20296
of 60,387
15.3
Total CVSS
Vulnerabilities
·
2
Medium
1
High
1
PT-2021-21187
2021-08-31
8.8
CVE-2021-36232
Unknown
Mik.Starlight
The issue is related to improper authorization in multiple functions, allowing an authenticated attacker to escalate privileges.
PT-2021-21188
2021-08-31
6.5
CVE-2021-36233
Unknown
Mik.Starlight
The issue allows an authenticated attacker to read arbitrary files from the filesystem by specifying the file path, due to the functionality of the `AdminGetFirstFileContentByFilePath` function.