CVE-2023-3098

Name of the Vulnerable Software and Affected Versions KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23

Description A critical issue has been found in the restore all sound file function, allowing for path traversal manipulation, such as '../filedir'. This issue requires local access to exploit. The issue has been publicly disclosed.

Recommendations For versions prior to 3.0.2-0kylin6k70-23, upgrade to version 3.0.2-0kylin6k70-23 to address this issue. As a temporary workaround, consider disabling the restore all sound file function until the upgrade is applied.