CVE-2023-48249
The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafte…
Published: 2024-01-10 · CVSS: 6.5 · CVSS 3.1
The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is possible to steal session cookies of other active users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7