Description (CNA)
Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ivanti / Xtraction | unaffected 2026.2.1 |
CWE
CWE-23
References
ADP enrichment
No English description supplied.
No references supplied.