PT-2020-13759

Name of the Vulnerable Software and Affected Versions DEXT5 Editor versions through 3.5.1402961 Description The issue allows an attacker to download arbitrary files. This is achieved by exploiting the savefilepath field in the handler/upload handler.jsp file. Recommendations For versions through...