CVE-2021-36123

An issue was discovered in Echo ShareCare 8.15.5

published July 13, 2021

CVSS
—
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

An issue was discovered in Echo ShareCare 8.15.5. The TextReader feature in General/TextReader/TextReader.cfm is susceptible to a local file inclusion vulnerability when processing remote input in the textFile parameter from an authenticated user, leading to the ability to read arbitrary files on the server filesystems as well any files accessible via Universal Naming Convention (UNC) paths.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00769 · 55.1th percentile
Published
2021-07-13T13:56Z
EPSS history
Timeline
  • 13 JUL 13:56Z
    An issue was discovered in Echo ShareCare 8.15.5
    cvelistv5