Unscored CVE-2023-45912 EUVD-2023-50175GHSA-p7jx-m4x8-cghf

WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from …

Published Oct 18, 2023 · Updated Jan 9, 2025 · Assigned by mitre

Description

WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings.

References

https://github.com/PostalBlab/Vulnerabilities/blob/main/ComScale/file_access.txt
https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2023-45912