Vulnerabilidades de Openstamanager
CVEs publicadas que afetam produtos de Openstamanager: 1 registro(s), com severidade, exploração e correções.
CVE-2018-25421
Média · 6.5
CWE-22 30/05/2026
Open STA Manager 2.3 Arbitrary File Download via Path Traversal
Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensitive system files.