Security Advisory
CVE-2023-38950
7.5
HIGH
Vulnerability Description
A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in version 9.0.120240617.19506 of ZKBioTime.
Published Date
August 3, 2023
Official Source
NIST NVD Advisory