CVE-2023-37739
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-37739 is a newly disclosed vulnerability affecting i-doit Pro version 25 and below. This issue permits an attacker to traverse directories outside the intended path during data retrieval, potentially accessing sensitive files or information. i-doit Pro is an open-source IT documentation and Discovery Tool. Successful exploitation of this path traversal vulnerability could result in unauthorized access to confidential data, leading to potential security risks for organizations using the affected software. It is highly recommended that users upgrade to the latest, patched version of i-doit Pro to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- I-doit
Affected Vendors
- Idoit
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions