CVE-2017-12586

2017-08-06T03:29:00
ID CVE-2017-12586
Type cve
Reporter cve@mitre.org
Modified 2017-08-14T12:59:00

Description

SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. It can be exploited by remote authenticated librarian users.