Security Advisory
CVE-2023-38879
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Community Edition version 9.0 of OS4EDs openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulnerability in the filename parameter of DownloadWindow.php.