Medium severity6.5NVD Advisory· Published Sep 25, 2023· Updated Jun 17, 2026

CVE-2023-43256

Description

A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-sanitized user input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gladysassistant/Gladys Assistant
cpe:2.3:a:gladysassistant:gladys_assistant:*:*:*:*:*:*:*:*
Range: <=4.26.1
Gladys Assistant/Gladys Assistantdescription
Gladys Assistant/Gladys Assistantllm-create
Range: <=4.26.1
Gladysassistant/Gladysllm-fuzzy
Range: <=4.26.1

Patches

Vulnerability mechanics

References

github.com/GladysAssistant/Gladys/commit/f27d0ea4689c3deca5739b5f9ed45a2ddbf00b7bnvdPatch
blog.moku.fr/cves/CVE-2023-43256/nvdThird Party Advisory
blog.moku.fr/cves/CVE-unassigned/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000