CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.

Published Sep 30, 2019 · Updated Aug 5, 2024 · Assigned by mitre