In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored outside of the web root.Referenceshttps://www.youtube.com/watch?v=7zC84TNpIxwhttps://www.usa.philips.com/healthcarehttps://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01
