PT-2020-13135

Name of the Vulnerable Software and Affected Versions TP-Link Omada Controller Software version 3.2.6 Description The issue allows Directory Traversal for reading arbitrary files via the com.tp link.eap.web.portal.PortalController.getAdvertiseFile function in the...

CVE-2020-12475: Improper Limitation of a Pathname to a Restricted Directory

TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tplink.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-web-3.2.6.jar...