CVE-2023-38879

The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulnerability in the…

published November 20, 2023

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulnerability in the 'filename' parameter of 'DownloadWindow.php'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03633 · 89.5th percentile
Published
2023-11-20T00:00Z
EPSS history
Timeline
  • 20 NOV 00:00Z
    The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulnerability in the…
    cvelistv5