CVE-2023-34125CWE-27

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges

published July 13, 2023

CVSS
—
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23616 · 97.8th percentile
Weakness
CWE-27 · Path Traversal: 'dir/../../filename'
Published
2023-07-13T00:21Z
EPSS history
Timeline
  • 13 JUL 00:21Z
    Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges
    cvelistv5