Security Advisory

CVE-2021-36123

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-07-13 13:56:20
Last updated 2024-08-04 00:47:43
Assigner mitre
State PUBLISHED

Description

An issue was discovered in Echo ShareCare 8.15.5. The TextReader feature in General/TextReader/TextReader.cfm is susceptible to a local file inclusion vulnerability when processing remote input in the textFile parameter from an authenticated user, leading to the ability to read arbitrary files on the server filesystems as well any files accessible via Universal Naming Convention (UNC) paths.