16Ara
CVE-2023-50264 | morpheus65535 bazarr up to 1.3.0 /system/backup/download/ send_file filename path traversal (GHSL-2023-192)
A vulnerability classified as critical was found in morpheus65535 bazarr up to 1.3.0. This vulnerability affects the functionsend_file
of the file /system/backup/download/. The manipulation of the argument filename leads to path traversal.
This vulnerability was named CVE-2023-50264. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.