Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.
Loading...
Loading...
Score 9.9 from GitHub Security Advisory (severity: HIGH) published 2023-08-21. NVD baseline CVSS 8.8; sources differ by 1.1.
Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.
August 21, 2023
January 17, 2025
MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
Explore the affected products and dependency analysis for CVE-2023-25914
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.