Path Traversal

scoutbrowser is vulnerable to path traversal. The vulnerability exists due to improper handling of file paths which allows a remote attacker to access sensitive data in the system...

Server-Side Request Forgery (SSRF)

scoutbrowser is vulnerable to server side request forgery. The function remotecors in alignviewers view does not check if the user is logged in or that the file extension is valid, allowing an attaker to perform SSRF...