2 results · Clear filters · Feed
-
Medium 5.0
Path Traversal
The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the…
-
Medium 5.4
Stored-XSS
For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties.