CVE-2023-38956

CVE-2023-38956 affects ZKTeco BioAccess IVS v3.3.1. A path traversal flaw (failure to properly filter path elements) can allow unauthenticated attackers to read arbitrary files by sending a crafted payload. The vulnerability is documented across multiple sources (CNVD, RH Red Hat, NVD) with consi...