CVE-2024-40407 Information

Description

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors.

Reference

https://blog.cybelesoft.com/thinfinity-workspace-security-bulletin-nov-2024/