Description (CNA)
An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read access to arbitrary files on the server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.maxum.com/Rumpus/Overview.html
- https://gist.github.com/escaped-com/83d89a05067c62e95992d42bbfa58933
ADP enrichment
No English description supplied.