Security Advisory

CVE-2023-37288

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-07-10 00:00:00
Last updated 2025-02-13 17:01:12
Assigner twcert
State PUBLISHED

Description

SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.