CVE-2018-16961

CVE-2018-16961 affects Open XDMoD up to version 7.5.0, where the file parameter in html/gui/general/dl_publication.php allows path traversal, enabling remote attackers to read PDF files in arbitrary directories. Root cause: improper validation of the file parameter leading to directory traversal....