CVE-2019-6500

CVE-2019-6500 affects Axway File Transfer Direct 2.7.1 and is an unauthenticated Directory Traversal vulnerability. The issue arises from a crafted HTTP GET request using %2e in place of '.' characters, as demonstrated by a /h2hdocumentation//%2e%2e/ substring. CVSS data reported: CVSSv2 base sco...