Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the fileName parameter to getGfiUpgradeFile or (2) cause a denial of service (CPU and memory consumption) via a .. (dot dot) in the fileName parameter to calculateRdsFileChecksum.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Sysaid Help Desk | — | Upgrade SysAid Help Desk to the latest version | Apr 2, 2025 | Jun 8, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub