CVE-2020-15923

Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal...

CVE-2020-15923

Mida eFramework up to version 2.9.0 is affected by an unauthenticated path traversal vulnerability. The root cause is improper filtering of path elements, allowing an attacker to access locations outside of a restricted directory by exploiting the system’s path handling. Affected product: Mida eF...