Kurz gesagt
- CVE-2023-47440 ist eine Schwachstelle (MITTEL (CVSS 6.5)) in gladys assistant (gladysassistant), gladys.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.0%, höher als bei 63.5% aller Schwachstellen.
- Abhilfe: auf 4.30.0 oder neuer aktualisieren.
Description
Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be incomplete, allowing authenticated attackers to extract sensitive files in the host machine.
NVD description
Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be incomplete, allowing authenticated attackers to extract sensitive files in the host machine.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free