CVE-2020-8996

AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadwithpath/downloadfile/?filepath=/etc/passwd URI...

CVE-2020-8996

AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadwithpath/downloadfile/?filepath=/etc/passwd URI...

CVE-2020-8996

CVE-2020-8996 affects AnyShare Cloud 6.0.9. The connected records confirm an authenticated directory traversal in the file download path, evidenced by the URI pattern interface/downloadwithpath/downloadfile/?filepath=/etc/passwd, allowing reading of server files. The root cause is a directory tra...