2019-09-30 12:35:52
mitre
PUBLISHED
CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.