CVE Catalog
CVE-2023-34598
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk44.86%
99th percentile - higher than 99% of all known CVEs
Summary
Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's response.
Risk Assessment
An attacker could gain access to sensitive information stored in server files, potentially leading to further attacks or data exposure.
Recommendation
It is recommended to update Gibbon to the latest version to mitigate this vulnerability and restrict access to the installation folder.
Original NVD description (English source)
Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's response.