Rmountjoy92 · Dashmachine · CVE-2023-6900
**Name of the Vulnerable Software and Affected Versions**
rmountjoy92 DashMachine versions 0.5 through 4
**Description**
A critical issue has been found in the software, affecting some unknown functionality of the file /settings/delete file. The manipulation of the argument `file` leads to path traversal, allowing access to files outside the intended directory, such as '../filedir'. The issue has been publicly disclosed and may be exploited.
**Recommendations**
For versions 0.5 through 4, consider restricting access to the /settings/delete file functionality until a patch is available. As a temporary workaround, avoid using the `file` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.