medium6.5
CVE-2023-37288
SmartBPM.NET component has a vulnerability of path traversal within its file download function.
Impact
SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartsoft | Smartbpm.Net | Version 6.70 |