CVE-2020-23715

Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download...

CVE-2020-23715

CVE-2020-23715 is a path traversal vulnerability in Webport CMS 1.19.10.17121 exploitable via the file/download parameter. The Red Hat and CNVD entries corroborate that the root cause is insufficient filtering of path elements, allowing an attacker to access locations outside of restricted direct...