Path Traversal Vulnerability in Adifier System
CVE-2023-49753
7.5HIGH
Summary
A Path Traversal vulnerability has been identified in the Adifier System developed by SpoonThemes, which enables local PHP file inclusion. This vulnerability stems from improper limitations on pathname access, potentially allowing unauthorized access to sensitive file resources on the server. It impacts all versions prior to 3.1.4, emphasizing the critical need for users of the Adifier System to upgrade their installations to mitigate any associated security risks.
Affected Version(s)
Adifier System < 3.1.4
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
FearZzZz (Patchstack Alliance)