CVE-2019-14767: Improper Limitation of a Pathname to a Restricted Directory

In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence dossier=../ and servletrecuperefichier document=../ allows an unauthenticated user to download arbitrary files from the server...

PT-2020-9602

Name of the Vulnerable Software and Affected Versions DIMO YellowBox CRM versions prior to 6.3.4 Description The issue allows an unauthenticated user to download arbitrary files from the server due to Path Traversal vulnerabilities in the images/Apparence and servletrecuperefichier endpoints. The...