medium6.5
CVE-2023-43256
A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-saniti…
Impact
A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-sanitized user input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gladysassistant | Gladys Assistant | through 4.26.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.moku.fr/cves/CVE-2023-43256/
- https://blog.moku.fr/cves/CVE-unassigned/
- https://github.com/GladysAssistant/Gladys/commit/f27d0ea4689c3deca5739b5f9ed45a2ddbf00b7b
- https://blog.moku.fr/cves/CVE-2023-43256/
- https://blog.moku.fr/cves/CVE-unassigned/
- https://github.com/GladysAssistant/Gladys/commit/f27d0ea4689c3deca5739b5f9ed45a2ddbf00b7b