Threats tagged 'ghsa-72r8-pgjr-cmwg'

A path traversal vulnerability exists in an API endpoint of Mobile Industrial Robots (MiR) software versions prior to 3.0.0. This flaw allows authenticated users to extract arbitrary files from the robot's file system by sending a specially crafted API request. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact primarily affecting confidentiality without impacting integrity or availability.