CVE-2022-39034 — Smart eVision - Path Traversal -2
Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs. A remote attacker with general user pri…
Published: 2022-09-28 · CVSS: 6.5 · CVSS 3.1
Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication, access restricted paths and download system files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7