CVE-2024-35428

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS...

CVE-2024-35428

CVE-2024-35428 affects ZKTeco ZKBio CVSecurity 6.1.1. The issue is a Directory Traversal via BaseMediaFile, allowing an authenticated user to delete local server files, leading to a Denial of Service. Documents consistently identify the vulnerable component as BaseMediaFile handling and do not pr...

CVE-2024-35428: Improper Limitation of a Pathname to a Restricted Directory

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS...