← Database

CVE-2021-36233

MEDIUM CVSS: 6.5 Published: 2021-08-31 Modified: 2026-06-17

Description

The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.

Affected Platforms

Unit4 Mik.Starlight

Weakness Type

CWE-552

References