CVE Catalog

CVE-2023-6190

Critical
Published: Translated: NVD NIST

Summary

The İzmir Katip Çelebi University Information Management System has a vulnerability due to improper limitation of a pathname to a restricted directory, allowing absolute path traversal.

Risk Assessment

An attacker could gain access to sensitive data or files on the server, posing a serious threat to the organization's information security.

Recommendation

It is recommended to update the system to a version after 30.11.2023 and implement additional security measures against Path Traversal attacks.

Original NVD description (English source)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in İzmir Katip Çelebi University University Information Management System allows Absolute Path Traversal. This issue affects University Information Management System: before 30.11.2023.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS