PT-2026-45036

Summary An authenticated Admidio member with upload rights on any one folder can permanently delete files from folders where they have only view access. The authorization check at the top of modules/documents-files.php evaluates upload rights against the attacker-supplied folder uuid URL paramete...

PT-2024-3918 · Ge Healthcare · Common Service Desktop

Name of the Vulnerable Software and Affected Versions: Common Service Desktop affected versions not specified Description: The issue concerns a path traversal vulnerability in the deleteFiles function of Common Service Desktop, a component of GE HealthCare ultrasound devices. This vulnerability i...