En bref
- CVE-2023-47440 est une vulnérabilité MOYENNE (CVSS 6.5) touchant gladys assistant (gladysassistant), gladys.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.0%, plus élevée que 63.5% des vulnérabilités.
- Correctif : mettre à jour vers 4.30.0 ou plus récent.
Description
Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be incomplete, allowing authenticated attackers to extract sensitive files in the host machine.
NVD description
Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be incomplete, allowing authenticated attackers to extract sensitive files in the host machine.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free