Biztalk360 vulnerabilities

An issue was discovered in Biztalk360 before 11.5. Due to mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka Directory Traversal.

In Biztalk360 before version 11.5, an access control issue allows any user to request loading a DLL file. During loading, a method is called. An attacker can craft a malicious DLL, upload it to the server, and use it to achieve remote code execution.

In Biztalk360 through version 11.5, a Directory Traversal vulnerability exists due to mishandling of user-provided input in a path to be read by the server. A Super User attacker can read files on the system and/or coerce an authentication from the service.