CVE-2017-18636

CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal...

PT-2019-8549

Name of the Vulnerable Software and Affected Versions CDG versions prior to 2017-01-01 Description The issue allows for directory traversal via the "downloadDocument.jsp" endpoint with the command and pathAndName parameters. Specifically, the "/downloadDocument.jsp?command=download&pathAndName="...

CVE-2017-18636: Improper Limitation of a Pathname to a Restricted Directory

CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal...