medium5.3
CVE-2020-27993
Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files.
Impact
Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hrsale | Hrsale | Version 2.0.0 |