CVE-2017-17876

Name of the Vulnerable Software and Affected Versions Biometric Shift Employee Management System version 3.0

Description The issue allows remote attackers to bypass intended file-read restrictions. This can be achieved via a user=download request with a pathname in the path parameter.

Recommendations For Biometric Shift Employee Management System version 3.0, consider restricting access to the user=download request until a patch is available. As a temporary workaround, avoid using the path parameter in this request to minimize the risk of exploitation.