CVE-2023-34125
MediumCVSS 6.5Exploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
Risk Assessment
An attacker can gain access to sensitive data, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update GMS to a version newer than 9.3.2-SP1 and Analytics to a version newer than 2.5.0.4-R7 to mitigate this vulnerability.
Original NVD description (English source)
Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.