Vulnerability — CVE-2024-35428

CVE-2024-35428

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-35428
Description:: ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the server which can lead to DoS.
Last updated date:: 07/18/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 07/18/2024
Reference url to background: https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35428.md