Description
In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an unauthenticated user to download arbitrary files from the server.
Unscored
CVE-2019-14767
EUVD-2019-5904GHSA-8xv3-84rr-j23r
In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an un…
Published Jan 21, 2020 · Updated Aug 5, 2024 · Assigned by mitre