CVE-2023-3512

7.5 highEPSS 0.7%

High (7.5) in setelsa-security conacwin. EPSS 0.7% chance of exploitation in the next 30 days.

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-23
Published: 2023-10-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

setelsa-security:conacwin

References

https://https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-setelsa-security-conacwin
https://github.com/advisories/GHSA-v6jm-v768-76h2
https://https://www.incibe.es/en/incibe-cert/notices/aviso/relative-path-traversal-setelsa-security-conacwin

Check your stack JSON