CVE-2023-3240

Name of the Vulnerable Software and Affected Versions OTCMS versions up to 6.62

Description A vulnerability has been found in an unknown functionality of the file usersNews deal.php. The manipulation of the file argument leads to path traversal, specifically '../filedir'.

Recommendations For OTCMS versions up to 6.62, as a temporary workaround, consider restricting access to the usersNews deal.php file until a patch is available. Avoid using the file argument in the affected functionality to minimize the risk of exploitation.