Medium · 6.5 CVE-2023-3675 EUVD-2023-44315GHSA-65gq-qmhg-3qjh

Insufficient input validation when downloading certain file types.

Published Apr 18, 2024 · Updated Aug 21, 2024 · Assigned by Secomea

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Secomea GateManager (Web GUI) allows Reading Data from System Resources.This issue affects GateManager: from 11.0.623074018 before 11.0.623373051.

Affected products

Vendor	Product	Affected	Fixed
Secomea	GateManager	11.0.623074018 – < 11.0.623373051	11.0.623373051

References

https://www.secomea.com/support/cybersecurity-advisory