Description
Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to access arbitrary system files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Galaxy Software Services Corporation. | Vitals ESP | 3.0.8 – ≤ 6.2.0 | — |