VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 14, 2023· Updated Jan 2, 2025

CVE-2023-34878

CVE-2023-34878

Description

An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip.

Affected products

2
  • Ujcms/Ujcmscpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: =6.0.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.