Virtosoftware vulnerabilities
We track 1 vulnerability in Virtosoftware products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Virtosoftware vulnerabilities
- 9.8 Critical severity
virto_bulk_file_download: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows arbitrary file download and deletion via absolute path traversal in the path parameter