Description
A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in version 9.0.120240617.19506 of ZKBioTime.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- ZKTeco BioTime v8.5.5 - Path Traversal http/cves/2023/CVE-2023-38950.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.