Description
Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cellopoint | CelloOS | ≤ v4.1.10 Build 20190922 | — |