Arbitrary File Read

SS.CMS is vulnerable to Arbitrary File Read. The vulnerability exists due to the lack of validation in the ReadTextAsync method which allows an attacker to gain access to files, resulting in Sensitive Information Disclosure...

Arbitrary File Read

Overview Affected versions of this package are vulnerable to Arbitrary File Read via the ReadTextAsync method due to missing filtering. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Issue - GitHub Release Credit: Chaitin Security Research Lab...