SmartBPM.NET vulnerabilities
1 known vulnerability in SmartBPM.NET from SmartSoft. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
SmartBPM.NET: Improper Limitation of a Pathname to a Restricted Directory
SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.