ITPison OMICARD EDM 's SMS - Path Traversal

CVE-2023-48373

What is CVE-2023-48373?

The OMICARD EDM from ITPison contains a vulnerability within the 'FileName' parameter that allows for path traversal. By manipulating this parameter, an unauthenticated remote attacker can bypass authentication mechanisms and gain access to sensitive files on the system, potentially leading to unauthorized information disclosure. It is crucial for users of this product to implement security measures to mitigate this risk.

References