CVE Catalog
CVE-2023-34834
MediumCVSS 5.3Exploitation Probability (EPSS)
High risk1.96%
78th percentile - higher than 78% of all known CVEs
Summary
MCL-Net version 4.3.5.8788 has a Directory Browsing vulnerability that allows attackers to gain sensitive information about the configured databases via the '/file' endpoint.
Risk Assessment
Organizations may be exposed to the disclosure of confidential data, potentially leading to further attacks or security breaches.
Recommendation
It is recommended to update the MCL-Net server to the latest version and restrict access to the '/file' endpoint.
Original NVD description (English source)
A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" endpoint.