Design/Logic Flaw

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

CVE-2023-27055

The CVE-2023-27055 issue affects Aver Information PTZApp2 prior to update 2.0.1051.53. Affected software exposes a directory traversal (path traversal) vulnerability in the web UI running on localhost, permitting an attacker to read sensitive files via a crafted GET request. Root cause is insuffi...