Cellopoint Cellos v4.1.10 Build 20190922 does not validate URL inputted properly. With cookie of an authenticated user, attackers can temper with the URL parameter and access arbitrary file on system.Referenceshttps://www.twcert.org.tw/tw/cp-132-3847-c62ca-1.html
