Armorx Spam
Monthly
Local file inclusion in ArmorX Spam allows remote attackers with a valid low-privilege authenticated session to traverse directories and cause PHP include/require statements to load files outside the intended path, exposing sensitive local data. The issue is network-reachable and low-complexity but requires authentication (PR:L); no public exploit identified at time of analysis, and no CISA KEV entry is present. The assessed impact is high confidentiality loss only, with no integrity or availability impact.
Local file inclusion in ArmorX Spam allows remote attackers with a valid low-privilege authenticated session to traverse directories and cause PHP include/require statements to load files outside the intended path, exposing sensitive local data. The issue is network-reachable and low-complexity but requires authentication (PR:L); no public exploit identified at time of analysis, and no CISA KEV entry is present. The assessed impact is high confidentiality loss only, with no integrity or availability impact.