CERT24Path traversal vulnerability in Zr.Admin.NETLoading data…
CERT24Threat Observatory
Period

Path traversal vulnerability in Zr.Admin.NET

Commits 0ee1ab8 through eb9228a of Zr.Admin.NET contain a path traversal vulnerability that allows any logged-in user to read arbitrary server files through the path parameter of /common/DownloadFile.

← Back to intelligence

Path traversal vulnerability in Zr.Admin.NET

Commits 0ee1ab8 through eb9228a of Zr.Admin.NET contain a path traversal vulnerability that allows any logged-in user to read arbitrary server files through the path parameter of /common/DownloadFile.