Skip to content
Threat Feed

Product

Open ISES Project 3.30A

1 brief RSS
high threat

Open ISES Project 3.30A Unauthenticated Path Traversal Vulnerability

Open ISES Project 3.30A is vulnerable to path traversal (CVE-2018-25408), allowing unauthenticated attackers to download arbitrary files by manipulating the filename parameter in the ajax/download.php endpoint, potentially exposing configuration and system files.

Open ISES Project 3.30A path-traversal vulnerability web-application
2r 1t 1c