Zkbio Cvsecurity Security Vulnerabilities and Issues — Zkbio Cvsecurity CVE List

Lucene search

ZktecoZkbio Cvsecurity

2 matches found

CVE•added 2024/05/30 5:15 p.m.•71 views

CVE-2024-35431

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server. NOTE: Third parties have indicated other versions are also vulnerable including up to 6.4.1.

7.5CVSS7.5AI score0.013EPSS

CVE•added 2024/05/30 5:15 p.m.•68 views

CVE-2024-35428

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS.

7.1CVSS6.5AI score0.00786EPSS