CVE-2023-31477

creationtimestamp| type| source ---|---|--- 2023-05-11 07:15:00+00:00| seen| https://t.me/cibsecurity/63858...

CVE-2023-31477

CVE-2023-31477 is a path-traversal vulnerability in GL.iNet devices prior to 3.216. The flaw is in the file-sharing feature, which has no server-side restriction to limit sharing to the USB path, enabling sharing of arbitrary directories (e.g., /tmp, /etc). Impact described as exposing files via ...

CVE-2023-31477

A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, because there is no server-side restriction to limit sharing to the USB path...