CVE-2024-7323 — Digiwin EasyFlow .NET - Arbitrary File Download
Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with regular privilege…
Published: 2024-08-02 · CVSS: 6.5 · CVSS 3.1
Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with regular privilege can exploit this vulnerability to download arbitrary files from the remote server .
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7