# Tightrope Carousel digital signage has a path traversal vulnerability

- Date: 2018-07-23
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2018-14573
- Products: [Carousel](https://signagelist.org/products/carousel/)

NVD published a path traversal vulnerability in Tightrope Carousel. A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5.

## Sources

- [CVE-2018-14573](https://nvd.nist.gov/vuln/detail/CVE-2018-14573) (NIST NVD)
- [http://release-notes.trms.com/txt/448](http://release-notes.trms.com/txt/448)

Page: https://signagelist.org/incidents/2018-07-tightrope-carousel-digital-signage-has-a-path/