VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Aug 31, 2021· Updated Jun 17, 2026

CVE-2021-36233

CVE-2021-36233

Description

The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Unit4/Mik.starlight
    cpe:2.3:a:unit4:mik.starlight:7.9.5.24363:*:*:*:*:*:*:*
  • MIK/starlightcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: = 7.9.5.24363

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.