Karol Królak

**Name of the Vulnerable Software and Affected Versions** Golem OEE MES versions prior to 11.6.0 **Description** An unauthenticated path traversal flaw allows an attacker on the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. Path traversal is a technique used to access files and directories that are stored outside the web root folder. **Recommendations** Update to version 11.6.0.