CVE-2017-7282

The CVE-2017-7282 vulnerability affects Unitrends Enterprise Backup before 9.1.1. The downloadFile function in api/includes/restore.php accepts any filename passed to /api/restore/download, allowing an authenticated attacker to read arbitrary files accessible to the web server (Local File Inclusi...