medium6.5
CVE-2021-37469
In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/..
Impact
In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nch | Webdictate | through 2.13 |