Description
ZKTeco BioTime v8.5.5存在路径遍历漏洞，未认证的攻击者可通过提供特制的有效载荷读取任意文件。
ZKTeco BioTime v8.5.5存在路径遍历漏洞(CVE-2023-38950)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-38950
https://claroty.com/team82/disclosure-dashboard/cve-2023-38950
https://avd.aliyun.com/detail?id=AVD-2023-38950
https://ddpoc.com/DVB-2025-10040.html
https://cve.imfht.com/detail/CVE-2023-38950
https://pentest-tools.com/vulnerabilities-exploits/zkteco-biotime-v855-path-traversal_27171
https://www.zkteco.com/en/Security_Bulletinsibs/10
https://www.tenable.com/cve/CVE-2023-38950
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38950.yaml
https://www.cve.org/CVERecord?id=CVE-2023-38950