Quorum Security Vulnerabilities

CVE-2021-37445

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file...

CVE-2021-37447

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file...

CVE-2021-37446

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file...

CVE-2021-37466

In NCH Quorum v2.03 and earlier, XSS exists via /conference?id=...

CVE-2021-37463

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name...

CVE-2021-37467

In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid=...

CVE-2021-37464

In NCH Quorum v2.03 and earlier, XSS exists via Conference Description...

CVE-2021-37465

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id=...

CVE-2021-37452

NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration...