CVE-2018-20092

https://notcve.org/view.php?id=CVE-2018-20092

PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request. PTC ThingWorx Platform hasta la versión 8.3.0 es vulnerable a un ataque de salto de directorio sobre los archivos ZIP mediante una petición POST. • https://www.doyler.net/security-not-included/ptc-thingworx-vulnerability https://www.ptc.com/en/documents/security/coordinated-vulnerability-disclosure/security-vulnerabilities • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •