Description (CNA)
Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to use URL-encoded traversal sequences to read arbitrary files from the underlying filesystem with the privileges of the gateway service, leading to disclosure of sensitive information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ozeki Ltd. / Ozeki SMS Gateway | affected 0 through 10.3.208 |
CWE
CWE-22
References
- https://www.exploit-db.com/exploits/51646
- https://ozeki-sms-gateway.com/
- https://www.vulncheck.com/advisories/ozeki-sms-gateway-unauthenticated-arbitrary-file-read
ADP enrichment
No English description supplied.
No references supplied.