GetFile.aspx in Planet eStream before 6.72.10.07 allows ..\ directory traversal to read arbitrary local files.

Published Dec 25, 2022 · Updated Apr 14, 2025 · Assigned by mitre