Path traversal

NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion...

PT-2021-21656

Name of the Vulnerable Software and Affected Versions NCH IVM Attendant versions 5.12 and earlier Description The issue allows path traversal via the logdeleteselected check0 parameter for file deletion. Recommendations For versions 5.12 and earlier, consider restricting access to the...