CVE-2023-34407

The CVE-2023-34407 entry affects Harbinger Offline Player 4.0.6.0.2, specifically OfflinePlayerService.exe, which allows directory traversal via ..\ in a URL. Reported impact is confidentiality loss (C: High) with no impact to integrity or availability, and CVSSv3.1 base score 7.5 (NETWORK, LOW c...