CVE-2021-38146

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data...

CVE-2021-38146

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data...

PT-2021-21966

Name of the Vulnerable Software and Affected Versions: Wipro Holmes Orchestrator version 20.4.1 Description: The issue allows remote attackers to read arbitrary files due to absolute path traversal in the SearchString JSON field. This is exploited through the "/home/download" API endpoint in POST...