Threats tagged 'ghsa-4wq8-9vvh-c555'

UnForm Server Manager versions prior to 10.1.12 contain an unauthenticated file read vulnerability in the arc endpoint. This flaw allows attackers to specify arbitrary log files via a parameter without proper input validation or path sanitization, enabling access to sensitive files on the host system without authentication.