CVE-2021-37446

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...

PT-2021-21659

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue allows an authenticated user to perform directory traversal, enabling file reading. This is achieved via the "documentprop?file=/.." endpoint. Recommendations For NCH Quorum versions...

CVE-2021-37446: Improper Limitation of a Pathname to a Restricted Directory

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...