Gotham table and Forward App Path traversal

CVE-2023-30970

What is CVE-2023-30970?

A path traversal vulnerability was identified in both the Gotham Table service and the Forward App, which permits an authenticated user to access and read arbitrary files located on the file system. This vulnerability arises from insufficient validation of user input, allowing for the exploitation of relative paths to gain unauthorized access to sensitive information. Organizations using these services should assess their current security posture and implement necessary mitigations to prevent potential data exposure and enhance their security controls.

References