CVE-2021-37447: Path Traversal
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-37447?
CVE-2021-37447 is a vulnerability in NCH Quorum v2.03 and earlier that allows an authenticated user to delete files through directory traversal.
How does CVE-2021-37447 affect NCH Quorum?
CVE-2021-37447 affects NCH Quorum v2.03 and earlier by allowing an authenticated user to use directory traversal to delete files.
What is the severity level of CVE-2021-37447?
CVE-2021-37447 has a severity level of high with a CVSS score of 8.1.
How can I fix the vulnerability in NCH Quorum?
To fix the vulnerability in NCH Quorum, it is recommended to update to a version later than 2.03.
Where can I find more information about CVE-2021-37447?
You can find more information about CVE-2021-37447 at these references: [Reference 1](https://github.com/0xfml/poc/blob/main/NCH/Quorum_2.03_LFI.md) and [Reference 2](https://www.nch.com.au/conference/index.html).