Threats tagged 'ghsa-mphm-qj4m-rgxx'

HYDRA X, MIP 2, and FEDRA 2 products from MPDV Mikrolab GmbH have an unauthenticated local file disclosure vulnerability affecting all releases until Maintenance Pack 36 with Servicepack 8 (week 36/2025). This vulnerability allows attackers to read arbitrary files on the Windows operating system by exploiting the "Filename" parameter of the public $SCHEMAS$ resource. The vulnerability is identified as CWE-22 (Path Traversal).