CVE-2023-39026

HighCVSS 7.5

Published: 22/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

10.56%

95th percentile - higher than 95% of all known CVEs

Summary

Directory Traversal vulnerability in FileMage Gateway for Windows deployments v.1.10.8 and earlier allows a remote attacker to obtain sensitive information via a crafted request to the /mgmt/ component.

Risk Assessment

An attacker may gain access to sensitive data, potentially leading to privacy breaches and security risks for the organization.

Recommendation

It is recommended to update FileMage Gateway to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive information via a crafted request to the /mgmt/ component.