CVE-2023-45596

5.3MEDIUM

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configurat

公開日: 3/5/2024更新日: 4/23/2025
NVDで表示MITREで表示

説明

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

AI分析AIによる分析

影響を受ける製品

ailuximx6

参照