CVE-2019-19264

creationtimestamp| type| source ---|---|--- 2024-03-12 16:16:58+00:00| seen| https://t.me/ctinow/205788...

CVE-2019-19264

In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?/../ URI...

CVE-2019-19264

CVE-2019-19264 affects Simplifile RecordFusion up to 2019-11-25. The vulnerability is a local-file disclosure via logger/logs?/../ or logger/hist?/../ URIs in the logs and hist parameters, enabling remote attackers to access local files. The NVD lists CVSS2/3.1 base scores of 5.0 (medium) and 7.5...