Security Advisory

CVE-2023-38879

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-11-20 00:00:00
Last updated 2024-08-02 17:54:39
Assigner mitre
State PUBLISHED

Description

The Community Edition version 9.0 of OS4EDs openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulnerability in the filename parameter of DownloadWindow.php.