CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-08-03
ZKTeco ZKBioTime iclock API Path Traversal Arbitrary File Read Vulnerability (CVE-2023-38950) Security Advisory
[Affected Scope] ZKTeco ZKBioTime v8.5.5 and all versions prior to 9.0.120240617.19506
[Impact] Unauthenticated remote attackers can read arbitrary sensitive system files by sending a crafted payload to the vulnerable API endpoint
[Mitigation] Immediately upgrade to the patched version (9.0.120240617.19506 or higher) and restrict external access to the application