Eibiz i-Media Server Digital Signage 3.8.0 File Path Traversal

Posted on 22 August 2020

Eibiz i-Media Server Digital Signage version 3.8.0 is affected by a directory traversal vulnerability. An unauthenticated remote attacker can exploit this to view the contents of files located outside of the server's root directory. The issue can be triggered through the oldfile GET parameter.