CVE-2023-34598

2023-06-2915:15:09

Google

osv.dev

gibbon

v25.0.0

local file inclusion

lfi

vulnerability

installation

server

7 High

AI Score

Confidence

High

0.035 Low

EPSS

Percentile

91.6%

JSON

Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it’s possible to include the content of several files present in the installation folder in the server’s response.

CPENameOperatorVersion
coreeq7.1.02
coreeq23.0.02
coreeq8.0.03
coreeq8.2.00
coreeq13.0.01
coreeq13.0.00
coreeq8.3.00
coreeq8.0.06
coreeq15.0.01
coreeq7.0.00