high7.8
CVE-2023-24256
An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal.
Impact
An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nio | Aspen | before 3.3.0 |