Beveiligingsadvies

CVE-2023-25650

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-14 06:52:23

Laatst bijgewerkt 2024-08-02 11:25:19

Toegewezen door zte

CVSS-score 6.5

Status PUBLISHED

Beschrijving

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads.

← Alle CVE's bekijken Bekijk op cve.org ↗