VULNERABILITY INTELLIGENCE

CVE-2023-21456

CVSS score9 CRITICAL

EPSS probability0.22%

CISA KEVNot currently listed

Published2023-03-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Description

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid.