CVE-2023-37288

SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.

Date published : 2023-07-09

https://www.twcert.org.tw/tw/cp-132-7223-af8f8-1.html