CVE Catalog
CVE-2023-37288
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.71%
48th percentile - higher than 48% of all known CVEs
Summary
The SmartBPM.NET component has a path traversal vulnerability in its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.
Risk Assessment
This vulnerability could lead to the exposure of sensitive system data, posing a serious threat to the organization's security.
Recommendation
It is recommended to update the SmartBPM.NET component to the latest version and implement appropriate security measures against path traversal attacks.
Original NVD description (English source)
SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.