CVE-2024-35431 Information

Description

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server.

Reference

https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35431.md