Directory traversal vulnerability in go/_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Soteesklep | Sote | 2.0 (including) | 2.0 (including) |
| Soteesklep | Sote | 2.5 (including) | 2.5 (including) |
| Soteesklep | Sote | 3.0 (including) | 3.0 (including) |
| Soteesklep | Sote | 3.1 (including) | 3.1 (including) |
| Soteesklep | Sote | 3.5 (including) | 3.5 (including) |