Description
Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATED.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Amodat | Amodat | 7.12.00.08 – ≤ 7.12.00.09 | — |
Medium · 5.3
CVE-2022-23167
EUVD-2022-28258GHSA-c7p7-f7j9-xgmq
Amodat - Mobile Application Gateway Local File Inclusion (LFI)
Published Jun 13, 2022 · Updated Sep 16, 2024 · Assigned by INCD