CVE-2023-45596

5.3MEDIUM

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configurat

Опубликовано: 3/5/2024Обновлено: 4/23/2025

Описание

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

ИИ-АнализНа базе ИИ

Затронутые продукты

ailuximx6

Ссылки