Vulnerabilities

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files.

The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code.