CVE-2023-53907: Bludit 3.13.1 Authenticated Arbitrary File Download via Backup Plugin
Bludit versions before 3.13.1 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through directory traversal.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53907?
CVE-2023-53907 is considered a medium severity vulnerability due to its impact on sensitive file access.
How do I fix CVE-2023-53907?
To mitigate CVE-2023-53907, upgrade Bludit to version 3.13.1 or later.
What type of vulnerability is CVE-2023-53907?
CVE-2023-53907 is an authenticated file download vulnerability found in the Backup Plugin of Bludit.
Who is affected by CVE-2023-53907?
Users of Bludit versions before 3.13.1 are affected by CVE-2023-53907.
What can attackers do with CVE-2023-53907?
Attackers can exploit CVE-2023-53907 to access arbitrary files on the server through manipulated file path parameters.