CVE-2023-45596

5.3MEDIUM

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configurat

发布于: 3/5/2024更新于: 4/23/2025
在NVD查看在MITRE查看

描述

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

AI分析AI驱动

受影响产品

ailuximx6

参考资料