CVE-2023-34598: Path Traversal
Published Jun 29, 2023
·Updated
Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's response.
Affected Software
1 affected component
GibbonEdu Gibbon=25.0.00
Event History
Jun 29, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2023-34598.
2
What is the severity rating of CVE-2023-34598?
CVE-2023-34598 has a severity rating of 9.8, which is considered critical.
3
What is the affected software and version?
The affected software is Gibbon v25.0.0.
4
What is the type of vulnerability in CVE-2023-34598?
CVE-2023-34598 is a Local File Inclusion (LFI) vulnerability.
5
How can the LFI vulnerability in Gibbon v25.0.0 be exploited?
In Gibbon v25.0.0, it is possible to include the content of several files present in the installation folder in the server's response, leading to LFI vulnerability exploitation.