Description
Local File Inclusion vulnerability in Ready's attachment upload panel allows low privileged user to provide link to a local file using the file:// protocol thus allowing the attacker to read content of the file. This vulnerability can be use to read content of system files.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Symfonia Ready_
Default version status: unaffected
7.0.0.0 to ≤ 7.19.39.23affected8.0.0.0 to ≤ 8.0.2.3affected