CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. See the original NVD description below for full technical details.
CVE
CVE-2023-25650
Severity
MEDIUM
CVSS
6.5
EPSS
0.59%
Original NVD Description
There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads.
Related CVEs
Other vulnerabilities affecting the same vendor(s)