Skip to content
OpenAdvisories
Unscored CVE-2019-18924 EUVD-2019-8598GHSA-q9p2-wx98-924v

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations)…

Published Nov 12, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to list all the directories and check if a particular file exists.

References