CVE-2023-7327CWE-22

Ozeki SMS Gateway <= 10.3.208 Unauthenticated Arbitrary File Read

High · published November 12, 2025

CVSS v4.0
8.7
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is

Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to use URL-encoded traversal sequences to read arbitrary files from the underlying filesystem with the privileges of the gateway service, leading to disclosure of sensitive information.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.02262 · 82.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-11-12T22:07Z
EPSS history
Timeline
  • 12 NOV 22:07Z
    Ozeki SMS Gateway <= 10.3.208 Unauthenticated Arbitrary File Read
    cvelistv5