CVE-2023-34598
CRITICAL EXPLOITED NUCLEIGibbon - Path Traversal
Title source: ruleDescription
Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's response.
Exploits (3)
Nuclei Templates (1)
Gibbon v25.0.0 - Local File Inclusion
CRITICALVERIFIEDby DhiyaneshDk
Shodan:
http.favicon.hash:-165631681 || http.favicon.hash:"-165631681"
FOFA:
icon_hash="-165631681"
Scores
CVSS v3
9.8
EPSS
0.9179
EPSS Percentile
99.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
VulnCheck KEV
2024-09-18
CWE
CWE-22
Status
published
Products (1)
gibbonedu/gibbon
25.0.00
Published
Jun 29, 2023
Tracked Since
Feb 18, 2026