Ektron: Ektron CMS Allows Unauthorized File Reading, Execution of Arbitrary Code

Two vulnerabilities found in Ektron Content Management System permit a potential attacker to read any files stored on the server without going through the authentication process and to run code of their choice. Ektron is a CMS platform used by more than 3,800 companies worldwide for the creation of custom enterprise-scale websites, as well as deploying and managing them. It is also suitable for creating site wireframes for global brand consistency. Recently, Accel-KKR private equity firm acq...