← All advisories

Medium severity6.5NVD Advisory· Published Mar 27, 2023· Updated Jun 17, 2026

CVE-2023-24366

CVE-2023-24366

Description

An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

rConfig/rConfig2 versions
cpe:2.3:a:rconfig:rconfig:6.8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rconfig:rconfig:6.8.0:*:*:*:*:*:*:*
- (no CPE)range: =6.8.0
rConfig/rConfigdescription

Patches

Vulnerability mechanics

References

2

github.com/mrojz/rconfig-exploit/blob/main/CVE-2023-24366.mdnvdThird Party Advisory
github.com/mrojz/rconfig-exploit/blob/main/rconfigV6_Local_File_Disclosure.mdnvdBroken Link

News mentions

0

No linked articles in our index yet.