Impact

In the back office, files can be compromised using path traversal by replaying the import file deletion query with a specified file path, using traversal path.

Patches

8.1.1

Found by

Aleksey Solovev (Positive Technologies)

Workarounds

none

References

none