CVE-2023-43256

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Sep 25, 2023
Updated: Oct 13, 2023
CWE ID 22

Summary

CVE-2023-43256 is a newly disclosed vulnerability affecting Gladys Assistant version 4.26.1 and earlier. This issue involves a path traversal flaw that can be exploited by authenticated attackers. By manipulating non-sanitized user input, they can extract sensitive files from the host machine. This vulnerability poses a serious risk to system security and should be addressed promptly through an update to a patched version of Gladys Assistant.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share