Description
Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to use URL-encoded traversal sequences to read arbitrary files from the underlying filesystem with the privileges of the gateway service, leading to disclosure of sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ozeki | Ozeki SMS Gateway | ≤ 10.3.208 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read http/cves/2023/CVE-2023-7327.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.