CVE-2022-44016
Assigner: mitre
Published: 2022-12-25T00:00:00
State: PUBLISHED
descriptions: value: An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can download arbitrary files from the web server by abusing an API call: /DS/LM_API/api/ConfigurationService/GetImages with an '"ImagesPath":"C:\\"' value.
affected: vendor: n/a
product: n/a
versions: version: n/a
status: affected
problemTypes: descriptions: type: text
description: n/a