Ovidentia CMS 6.0 - Information Disclosure on FileManager content

Project information

Incorrect Access Control in FileManager in Ovidentia CMS 6.0 allows remote unauthenticated users to view and download content (information disclosure) in the upload directory via path traversal. Tested on version 6.0, this version is vulnerable.

18 Commits
1 Branch
0 Tags

README

Created on

October 26, 2021

Loading