CVE-2024-10379

ESAFENET CDG 5 contains a path traversal where the vulnerable function is actionViewDecyptFile in /com/esafenet/servlet/client/DecryptApplicationService.java. An attacker can manipulate decryptFileId (example: ../../../Windows/System32/drivers/etc/hosts) to access files outside the web root (path...