An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Freetakserver-ui | Freetakserver-ui_project | 1.9.8 (including) | 1.9.8 (including) |