CVE-2021-37446: 
NixOS vulnerability analysis and mitigation

In NCH Quorum v2.03 and earlier, an authenticated user can exploit a directory traversal vulnerability via logprop?file=/.. for file reading (CISA Bulletin). The vulnerability was discovered on July 25, 2021, affecting the NCH Quorum conference server software.

The vulnerability allows authenticated users to perform directory traversal attacks through multiple vectors in the application. The attack can be executed via endpoints like 'logprop?file=/..' which permits unauthorized file reading through path traversal. The vulnerability has not yet been assigned a CVSS score (CISA Bulletin).

The vulnerability enables authenticated attackers to view or delete any file on the remote system via path traversals in separate functions. This access is dependent on the running context of the application. Additionally, attackers can potentially access credential files of other NCH applications typically stored in \ProgramData\NCH Software\ (GitHub POC).

NCH Software has marked Quorum as a legacy program that is no longer supported. The vendor explicitly warns that the person setup as admin on this program can have access to files on the system (NCH Software).