CVE-2021-37469

CVE-2021-37469 describes a directory traversal in NCH WebDictate v2.13 and earlier. The root cause is a flawed logprop?file=/… path handling that allows authenticated users to traverse the filesystem and read files. The vulnerability affects the WebDictate component handling file paths and is sup...