VYPR

Gladys Assistant

by Gladysassistant

Source repositories

CVEs (2)

  • CVE-2023-47440MedDec 7, 2023
    risk 0.35cvss 6.5epss 0.01

    Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be incomplete, allowing authenticated attackers to extract sensitive files in the host machine.

  • CVE-2023-43256MedSep 25, 2023
    risk 0.00cvss 6.5epss 0.01

    A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-sanitized user input.