CVE-2019-10767
An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited using the administ…
Published: 2019-11-21 · CVSS: Unscored
An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited using the administrative web panel with a request for an adapter file. **Note:** The attacker has to be logged in if the authentication is enabled (by default isn't enabled).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7