CVE-2023-26559

The CVE-2023-26559 entry describes a directory traversal flaw in Syncro Soft Oxygen XML Web Author (pre-25.0.0.3 build 2023021715) and Oxygen Content Fusion (pre-5.0.3 build 2023022015) that lets an attacker read files under WEB-INF via a crafted HTTP request. Affected versions include XML Web Au...