The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an unauthenticated attacker can: – On Windows, list files in any directory, read any file, delete any file, upload any file to any directory accessible by the web server. – On Linux, read any file, download any directory, delete any file, upload any file to any directory accessible by the web server.

Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını Oku

Kaynak: National Vulnerability Database