Path Traversal Vulnerability Affects GMAce from n/a to 1.5.2

CVE-2023-23872

What is CVE-2023-23872?

The vulnerability in the German Mesky GMAce plugin presents a significant security risk due to improper limitations of a pathname to a restricted directory. This flaw allows attackers to exploit path traversal techniques, potentially leading to unauthorized access to sensitive files and directories on the server. Affected versions of GMAce include those up to and including 1.5.2, necessitating prompt updates to mitigate potential exploitation.

References