CVE-2019-19264: Simplifile Recordfusion

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?/../ URI.

Affected products

• Simplifile Recordfusion: up to and including 2019-11-25

Published 2019-12-17. Last modified 2026-06-17.