Path Traversal Vulnerability Affects Consulting
CVE-2023-37385
7.3HIGH
What is CVE-2023-37385?
A path traversal vulnerability exists in StylemixThemes Consulting that allows for unauthorized access to sensitive files on the server via PHP local file inclusion. This issue arises from improper limitations on pathnames, which can be exploited by attackers to gain access to restricted directories. Users of Consulting versions up to 6.5.6 are particularly at risk and should take immediate action to secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Consulting <= 6.5.6
References
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Dave Jong (Patchstack)