| Package | Affected versions | Patched versions |
|---|---|---|
| iview | < 5.7.05.7057 | 5.7.05.7057 |
A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privileges. A specific parameter is not properly sanitized or normalized, potentially allowing an attacker to determine the existence of arbitrary files on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free