Symfonia Ready Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in the attachment upload panel of Symfonia Ready_ software, specifically in versions 7.0.0.0 through 7.19.39.23. This vulnerability allows low-privileged users to provide links to local files using the file:// protocol, enabling them to read the contents of those files. Exploitation of this vulnerability could lead to unauthorized access to sensitive system files.

Impact

Exploitation of this vulnerability allows for local file inclusion, with the potential to read sensitive system files on the server.