CVE-2018-14927: Improper Limitation of a Pathname to a Restricted Directory

Matera Banco 1.0.0 is vulnerable to path traversal allowing access to system files outside the default application folder via the /contingency/servlet/ServletFileDownload file parameter, related to /contingency/web/receiptQuery/receiptDisplay.jsp...

PT-2018-12805

Name of the Vulnerable Software and Affected Versions Matera Banco version 1.0.0 Description The issue allows for path traversal, enabling access to system files outside the default application folder. This is achieved via the "file" parameter in the /contingency/servlet/ServletFileDownload...