CVE-2019-10257

CVE-2019-10257 affects Zucchetti HR Portal (through 2019-03-15). It is a directory traversal/path-traversal vulnerability that allows unauthenticated users to escape restricted directories (dot-dot-slash) and read files, including the application’s Java sources under /WEB-INF/classes/*.class. NVD...