CVE-2023-47440 | BDVDB-2026-218705 Detail

Description#

Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be incomplete, allowing authenticated attackers to extract sensitive files in the host machine.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/GladysAssistant/Gladys/pull/1918/commits/4f56ba250ff9f46578f1afa6a97e62e74bad83b7
https://blog.moku.fr/cve/
https://blog.moku.fr/cves/CVE-2023-47440/

Exploit#

No public exploit known

History#

Version 12023-12-07Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.