Description
SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SmartSoft | SmartBPM.NET | 6.70 | — |