CVE-2023-23327

MediumCVSS 4.9

Published: 10/03/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.82%

53th percentile - higher than 53% of all known CVEs

Summary

An information disclosure vulnerability exists in AvantFAX 3.3.7. Backups of sent/received faxes and database backups are stored with the current date as the filename and hosted on the web server without access controls.

Risk Assessment

An attacker can access sensitive fax data and database backups, leading to leakage of business information or personal data.

Recommendation

Immediately update AvantFAX to the latest version and configure proper access controls for backup directories.

Original NVD description (English source)

An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent/received faxes, and database backups are stored using the current date as the filename and hosted on the web server without access controls.