CVE-2023-38950 1

CVE-2023-38950: ZKTeco Bio Time Path Traversal Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog May 19, 2025

ZKTeco BioTime contains a path traversal vulnerability in the iclock API that allows an unauthenticated attacker to read arbitrary files via supplying a crafted payload.

Vulnerabilities & Patching