medium6.5
CVE-2022-46309
Vitals ESP upload function has a path traversal vulnerability.
Impact
Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to access arbitrary system files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vitalsesp | Vitals Esp | from 3.0.8 through 6.2.0 |