CVE-2021-36233

The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows by design an authenticated attacker to read arbitrary files from the filesystem by specifying the file path...

CVE-2021-36233: Files or Directories Accessible to External Parties

The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows by design an authenticated attacker to read arbitrary files from the filesystem by specifying the file path...

PT-2021-21188

Name of the Vulnerable Software and Affected Versions MIK.starlight version 7.9.5.24363 Description The issue allows an authenticated attacker to read arbitrary files from the filesystem by specifying the file path, due to the functionality of the AdminGetFirstFileContentByFilePath function...