CVE-2023-24366: Medium severity rconfig vulnerability
Published Mar 27, 2023
·Updated
An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request.
Affected Software
1 affected component
rConfig rConfig=6.8.0
Event History
Mar 27, 2023
CVE Published
09:15 PM
Frequently Asked Questions
1
What is CVE-2023-24366?
CVE-2023-24366 is an arbitrary file download vulnerability in rConfig v6.8.0.
2
How does CVE-2023-24366 work?
CVE-2023-24366 allows attackers to download sensitive files by sending a crafted HTTP request.
3
What is the severity of CVE-2023-24366?
The severity of CVE-2023-24366 is medium with a CVSS score of 6.5.
4
How can I fix CVE-2023-24366?
To fix CVE-2023-24366, you should update rConfig to a version that is not affected by the vulnerability.
5
Where can I find more information about CVE-2023-24366?
You can find more information about CVE-2023-24366 in the following references: [link1], [link2].