Security Advisory
CVE-2023-53907
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Bludit versions before 3.13.1 contain an authenticated file download vulnerability in the Backup Plugin that allows logged-in users to access arbitrary files. Attackers can exploit the plugin's download functionality by manipulating file path parameters to read sensitive system files through directory traversal.