← CVE Intelligence

CVE-2023-37288

SmartBPM.NET - Path Traversal PUBLISHED

Description (CNA)

SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.

Affected (CNA)

Vendor / productVersions
SmartSoft / SmartBPM.NETaffected 6.70

CWE

CWE-23

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.