NCH WebDictate path traversal vulnerability

A security vulnerability exists in NCH WebDictate, a web-based dictation recording, editing and management software, which stems from the product's logprop?file=/... path fails to filter incoming special characters, which can be exploited to read critical files...

PT-2021-21684

Name of the Vulnerable Software and Affected Versions NCH WebDictate versions 2.13 and earlier Description The issue allows authenticated users to exploit a path traversal vulnerability using the logprop?file=/.. parameter to read files on the filesystem. Recommendations For NCH WebDictate versio...

CVE-2021-37469: Improper Limitation of a Pathname to a Restricted Directory

In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem...