CVE-2019-11397

GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 (when used with .NET Framework 4.5) allows Local File Inclusion via the FileDesc parameter.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-05-14

Last modified

2024-08-04

Weaknesses

CWE-22

Affected products

• .net Framework (Microsoft)
• Rapid4 (Rapidflows)

References

• http://rapidflows.com/
• https://medium.com/%40javarmutt/rapid4-local-file-inclusion-0day-151c830ac74a