high8.7
CVE-2023-7327
Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability.
Impact
Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to use URL-encoded traversal sequences to read arbitrary files from the underlying filesystem with the privileges of the gateway service, leading to disclosure of sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ozeki SMS Gateway | Ozeki SMS Gateway | through 10.3.208 |
Versions were read from the advisory text. No structured product data has been published for this record yet.