Medium severity4.6NVD Advisory· Published Dec 17, 2023· Updated Jun 17, 2026
CVE-2023-6900
CVE-2023-6900
Description
A vulnerability, which was classified as critical, has been found in rmountjoy92 DashMachine 0.5-4. Affected by this issue is some unknown functionality of the file /settings/delete_file. The manipulation of the argument file leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. VDB-248258 is the identifier assigned to this vulnerability.
Affected products
3cpe:2.3:a:rmountjoy92:dashmachine:0.5-4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:rmountjoy92:dashmachine:0.5-4:*:*:*:*:*:*:*
- (no CPE)range: <=0.5-4
- (no CPE)range: 0.5-4
Patches
Vulnerability mechanics
References
3- treasure-blarney-085.notion.site/DashMachine-Arbitrary-File-Deletion-ab44f2fe68e843c393ae9e0c1d487676nvdExploitThird Party Advisory
- vuldb.comnvdPermissions RequiredThird Party Advisory
- vuldb.comnvdThird Party Advisory
News mentions
0No linked articles in our index yet.