CVE-2021-46203

Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter...

CVE-2021-46203

Taocms version 3.0.2 is affected by an arbitrary file read vulnerability via the path parameter. The root cause described in CNVD/CNNVD/other sources is lack of proper filtering/restrictions on the path parameter, enabling reading arbitrary files. The CVE entry notes impact to confidentiality (pa...