Plugnmeet Server
Monthly
Path traversal in plugNmeet Server through 2.5.2 allows any authenticated meeting participant to read arbitrary files from the host by supplying crafted ../ sequences in the filePath value passed to the whiteboard document-conversion endpoint; the resulting page images are then retrievable without authentication via /download/uploadedFile/. The assessed impact is confidentiality-only (high file read, no write or availability effect) against the server process's readable files, and publicly available exploit code exists - though there is no CISA KEV listing, so this is best treated as a moderate-priority information-disclosure issue rather than a critical emergency. Risk is highest where the plugNmeet process can read secrets, configuration files, or credentials on the same host.
Path traversal in plugNmeet Server through 2.5.2 allows any authenticated meeting participant to read arbitrary files from the host by supplying crafted ../ sequences in the filePath value passed to the whiteboard document-conversion endpoint; the resulting page images are then retrievable without authentication via /download/uploadedFile/. The assessed impact is confidentiality-only (high file read, no write or availability effect) against the server process's readable files, and publicly available exploit code exists - though there is no CISA KEV listing, so this is best treated as a moderate-priority information-disclosure issue rather than a critical emergency. Risk is highest where the plugNmeet process can read secrets, configuration files, or credentials on the same host.