The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.Referenceshttps://psirt.bosch.com/security-advisories/BOSCH-SA-711465.html