CVE-2021-37469

Name of the Vulnerable Software and Affected Versions NCH WebDictate versions 2.13 and earlier

Description The issue allows authenticated users to exploit a path traversal vulnerability using the logprop?file=/.. parameter to read files on the filesystem.

Recommendations For NCH WebDictate versions 2.13 and earlier, update to a version later than 2.13 to resolve the issue. As a temporary workaround, consider restricting access to the logprop?file= API endpoint until a patch is available. Avoid using the file parameter in the affected API endpoint until the issue is resolved.