Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. (dot dot) in the StartID parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.065
EPSS Ranking 92.9%