Beveiligingsadvies

CVE-2022-38803

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-30 00:00:00
Laatst bijgewerkt 2025-04-24 19:46:02
Toegewezen door mitre
CVSS-score 6.8
Status PUBLISHED

Beschrijving

Zkteco BioTime < 8.5.3 Build:20200816.447 is vulnerable to Incorrect Access Control via Leave, overtime, Manual log. An authenticated employee can read local files by exploiting XSS into a pdf generator when exporting data as a PDF