CVE-2019-11397

The CVE-2019-11397 issue affects Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 when used with .NET Framework 4.5. The GetFile.aspx handler exposes a Local File Inclusion (LFI) vulnerability via the FileDesc parameter, enabling an attacker to access local files. Impact is documented as ...

CVE-2019-11397

GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 when used with .NET Framework 4.5 allows Local File Inclusion via the FileDesc parameter...