In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters to test-browser/index.cfm allow directory traversal.

Published Nov 24, 2020 · Updated Aug 4, 2024 · Assigned by mitre