Path Traversal Vulnerability Affects Unite Gallery Lite

CVE-2023-33310

Summary

A vulnerability exists in Valiano Unite Gallery Lite due to improper limitation of a pathname to a restricted directory, allowing for PHP Local File Inclusion (LFI). This flaw enables an attacker to potentially access sensitive files on the server or execute arbitrary PHP code through crafted input. Affected versions, including all releases up to and including 1.7.59, require immediate attention to protect against this type of path traversal attack, ensuring the integrity and confidentiality of hosted websites.

References