CVE-2020-5513: Improper Limitation of a Pathname to a Restricted Directory

Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal...

PT-2020-18490

Name of the Vulnerable Software and Affected Versions Gila CMS version 1.11.8 Description The issue allows for directory traversal via the /cm/delete API endpoint with the t parameter. This could potentially lead to unauthorized access to sensitive files. Recommendations For Gila CMS version...