CVE-2023-27179

HIGH 7.5CVE-2023-27179 · Published 11/04/2023 · updated 17/06/2026

In short

CVE-2023-27179 is a HIGH (CVSS 7.5) vulnerability affecting gdidees cms (gdidees).
Chance of exploitation in the next 30 days (EPSS): 60.8%, higher than 99.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gdidees cms gdidees	`≤ 3.9.1`	No fix yet

Description

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php.

References

packetstormsecurity.com/files/171894/GDidees-CMS-3.9.1-Local-File-Disclosure-Directory-Traversal.html
gist.github.com/Hadi999/516aa25b953b0cba57089a0c11b1305b · Third Party Advisory
knowledge-base.secureflag.com/vulnerabilities/unrestricted_file_download/unrestricted_file_download_vulnerability.html · Third Party Advisory
gdidees.eu/cms-1-0.html · Product
packetstorm.news/files/id/171894

More vulnerabilities in gdidees cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gdidees cms

gdidees

≤ 3.9.1

No fix yet

More vulnerabilities in gdidees cms

See all →