CVE-2023-38950 Information

Description

A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.

Reference

http://zkteco.com https://claroty.com/team82/disclosure-dashboard/cve-2023-38950