VYPR

File Transfer Direct

by Axway

CVEs (1)

  • CVE-2019-6500Jan 21, 2019
    risk 0.01cvss epss 0.04

    In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request with %2e instead of '.' characters, as demonstrated by an initial /h2hdocumentation//%2e%2e/ substring.