CVE-2021-42052
IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter.
CVSS 3.1 · 7.5 High
EPSS 1.1%
KEV · Not listed
Vendors
Products