← All advisories

Medium severity6.5NVD Advisory· Published Mar 27, 2023· Updated Jun 17, 2026

CVE-2023-24366

CVE-2023-24366

Description

An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

rConfig/rConfigllm-fuzzy3 versions
=6.8.0+ 2 more
- (no CPE)range: =6.8.0
- (no CPE)
- cpe:2.3:a:rconfig:rconfig:6.8.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

github.com/mrojz/rconfig-exploit/blob/main/CVE-2023-24366.mdnvdThird Party Advisory
github.com/mrojz/rconfig-exploit/blob/main/rconfigV6_Local_File_Disclosure.mdnvdBroken Link

News mentions

0

No linked articles in our index yet.