CVE-2023-51926 Path traversal in n/a

High 7.5 Published 20 Jan 2024 Updated 9 Jul 2026

Attackers can read arbitrary files from the server via the CommonServletDispatcher component in YonBIP.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-51926?

CVE-2023-51926 is a high-severity path traversal vulnerability in n/a, published on 20 Jan 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component.

Which versions are affected by CVE-2023-51926?

It affects 1 product.

Products include Yonyou Yonbip.

How do I fix CVE-2023-51926?

No fix has been published for CVE-2023-51926 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2023-51926 being exploited?

There is no known exploitation of CVE-2023-51926 in the wild and no public exploit code.

Sources

Also known as GHSA-xhgx-qvgm-xg3q.