Assigner | mitre |
Reserved | 2024-02-26 |
Published | 2024-04-04 |
Updated | 2024-06-20 |
Description
INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path traversal, such as with the /cgi-bin/display?file=/etc/passwd URI.
References
https://gist.github.com/s4fv4n/098bd368bf054d008078e369108c2ebd