medium6.5
CVE-2021-36233
The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the file…
Impact
The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Unit4 | Mik.Starlight | Version 7.9.5.24363 |