mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-22 22:19:39 +02:00
784 B
784 B
CVE-2019-9632
Description
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.
POC
Reference
No PoCs from references.