Directory Traversal in Gladys Assistant

MEDIUM 6.5CVE-2023-47440 · GHSA-c79f-pqgf-fhp3 · Published 07/12/2023 · updated 17/06/2026

In short

CVE-2023-47440 is a MEDIUM (CVSS 6.5) vulnerability affecting gladys assistant (gladysassistant), gladys.
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.5% of all vulnerabilities.
Fix: update to 4.30.0 or later.

Package	Affected versions	Patched versions
gladys assistant gladysassistant	`< 4.30.0`	`4.30.0`
gladys npm	`≤ 4.27.0`	No fix yet

Description

Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be incomplete, allowing authenticated attackers to extract sensitive files in the host machine.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2023-47440 · ADVISORY
GladysAssistant/Gladys#1918 · WEB
blog.moku.fr/cve · WEB
blog.moku.fr/cves/CVE-2023-47440 · WEB
GladysAssistant/Gladys · PACKAGE
blog.moku.fr/cve · Third Party Advisory
blog.moku.fr/cves/CVE-2023-47440 · Third Party Advisory

More vulnerabilities in gladys assistant

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free