TI-2022-17340 CVE-2022-37197 · GHSA-r9q3-942v-rjv9
IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.
Priority HIGH 69
IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.
2 records
IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.
In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim's endpoint, which…