Description
The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.
Unscored
CVE-2021-36233
EUVD-2021-22853GHSA-xg8h-2cqp-4x5f
The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary…
Published Aug 31, 2021 · Updated Aug 4, 2024 · Assigned by mitre