Locked ExploitsVisual Planning 8 Arbitrary File Read

[1337day-Exploits]

Authenticated attackers can exploit a weakness in the XML parser functionality of the Visual Planning application in order to obtain read access to arbitrary files on the application server. Depending on configured access permissions, this vulnerability could be used by an attacker to exfiltrate secrets stored on the local file system. All versions prior to Visual Planning 8 (Build 240207) are affected.

This is the hidden content, please

• Sign In
• or
• Sign Up