Description
SpinetiX Fusion Digital Signage 3.4.8 contains an unauthenticated information disclosure vulnerability in the database backup directory. Attackers can access the /content/files/backups/ endpoint to download sensitive backup files containing user credentials and system information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SpinetiX | Fusion Digital Signage | ≤ 3.4.8 | — |
References
- ExploitDB-48845 exploit
- Official Product Homepage product
- Vendor Security Advisory for ZSL-2020-5593 vendor-advisory vdb-entry
- VulnCheck Advisory: SpinetiX Fusion Digital Signage 3.4.8 Unauthenticated Database Backup Disclosure third-party-advisory