Description

Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's response.

Remediation

References

CVE-2023-34598

Related Vulnerabilities

PHP Other Vulnerability (CVE-2015-0273)

Tornado Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2014-9720)

Apache 2.x version older than 2.0.45

WordPress Plugin Sticky Menu on Scroll, Sticky Header, Sticky Welcome Bar for Any Theme-myStickymenu Unspecified Vulnerability (2.1.4)

Drupal Core 8.5.x Cross-Site Scripting (8.5.0 - 8.5.14)

Severity

Critical

Classification

CVE-2023-34598 CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities