high7.5
CVE-2018-16961
An issue was discovered in Open XDMoD through 7.5.0.
Impact
An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows Path traversal via the file parameter, allowing remote attackers to read PDF files in arbitrary directories.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Buffalo | Open Xdmod | through 7.5.0 |