CVE-2023-37288 (published 2023-07-10T00:00:00)
SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.
Affected products: Vendor: SmartSoft
Product: SmartBPM.NET 
Versions:  6.70