Disclosure Date 2020/11/16
Arbitrary File Read in KonaWiki3
KonaWiki: v3.1.1 and earlier
Inadequate query checking allows unauthorized disclosure of information stored above the target directory published as a website by a remote attacker. By exploiting this vulnerability, arbitrary files can be obtained.