CVE-2023-43256
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Sep 25, 2023
Updated: Oct 13, 2023
CWE ID 22
Summary
CVE-2023-43256 is a newly disclosed vulnerability affecting Gladys Assistant version 4.26.1 and earlier. This issue involves a path traversal flaw that can be exploited by authenticated attackers. By manipulating non-sanitized user input, they can extract sensitive files from the host machine. This vulnerability poses a serious risk to system security and should be addressed promptly through an update to a patched version of Gladys Assistant.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share