4 matches found
CVE-2026-111635
Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...
EUVD-2026-103057
Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...
CVE-2026-111635
Helical Insight through 7.0.0 is vulnerable to a path traversal vulnerability (CWE-22) within the /getExternalResource endpoint. This flaw allows authenticated viewers to bypass per-resource access controls by supplying parent-directory segments in the path parameter . Successful exploitation ena...
PT-2026-116034
Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...