Joris Aerts, Tesla Inc.

Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise

Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction

Path Traversal in Altium Enterprise Server Viewer StorageController Allows Arbitrary File Read

Path Traversal in Altium Enterprise Server ComparisonService Allows Arbitrary File Write

Path Traversal in Altium Projects Service Allows Arbitrary File Read

Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution

Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure

Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation

Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read

Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write