Antonio Montesano

**Name of the Vulnerable Software and Affected Versions** PRIMEUR SPAZIO version 2.5.1.954 **Description** The issue allows an unauthenticated attacker to obtain sensitive data related to the content of transferred files via a crafted HTTP request. **Recommendations** For version 2.5.1.954, consider restricting access to the HTTP Server in the File Transfer component until a patch is available. As a temporary workaround, avoid using the File Transfer feature to minimize the risk of exploitation.