CVE-2023-3512CWE-23

Relative path traversal in Setelsa Security ConacWin CB

High · published October 4, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00690 · 52.2th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2023-10-04T10:53Z
EPSS history
Timeline
  • 04 OCT 10:53Z
    Relative path traversal in Setelsa Security ConacWin CB
    cvelistv5