Design/Logic Flaw

2021-07-1314:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

JSON

An issue was discovered in Echo ShareCare 8.15.5. The TextReader feature in General/TextReader/TextReader.cfm is susceptible to a local file inclusion vulnerability when processing remote input in the textFile parameter from an authenticated user, leading to the ability to read arbitrary files on the server filesystems as well any files accessible via Universal Naming Convention (UNC) paths.

CPENameOperatorVersion
sharecareeq8.15.5

CPE	Name	Operator	Version
	sharecare	eq	8.15.5

References

github.com/atredispartners/advisories/blob/master/ATREDIS-2021-0001.md