CVE-2017-12815

CVE-2017-12815 concerns a path traversal vulnerability in Bomgar Remote Support Portal’s JavaStart.jar Applet (versions 52790 and earlier). The underlying issue is in App.class, which uses the attacker-controlled URL parameter to construct a File() path, allowing creation/modification/deletion of...