cve/cves/2017/CVE-2017-9447.md

CVE-2017-9447

Description

In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource under the "RASHTML5Gateway" directory. A remote, unauthenticated attacker could exploit this weakness to read arbitrary files from the vulnerable system using path traversal sequences.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.