CVE-2023-37739

Summary

CVE-2023-37739 is a newly disclosed vulnerability affecting i-doit Pro version 25 and below. This issue permits an attacker to traverse directories outside the intended path during data retrieval, potentially accessing sensitive files or information. i-doit Pro is an open-source IT documentation and Discovery Tool. Successful exploitation of this path traversal vulnerability could result in unauthorized access to confidential data, leading to potential security risks for organizations using the affected software. It is highly recommended that users upgrade to the latest, patched version of i-doit Pro to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.