Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download Detection

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. !/usr/bin/env python3 -- coding: utf-8 -- """The File Download API in Wipro Holmes...