Information Disclosure

2022-10-1201:01:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

melis-asset-manager

information disclosure

vulnerability

displayfile function

restricted directory

arbitrary files

EPSS

0.002

Percentile

56.3%

JSON

melisplatform/melis-asset-manager is vulnerable to information disclosure. The vulnerability is due to the displayFile function not properly checking whether the requested file is outside the restricted directory, allowing an attacker to read arbitrary files.