← Back

Gladys Assistant

gladys_assistant

Vendor: Gladysassistant • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-47440
1Gladysassistant
1Gladys Assistant
Jun 17, 2026
Dec 7, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be incomplete, allowing authenticated attackers to extract sensitive files in the host machine.
CVE-2023-43256
1Gladysassistant
1Gladys Assistant
Jun 17, 2026
Sep 25, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-sanitized user input.