CVE-2023-52953
Published: 08 January 2025
Description
Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.
Security Summary
CVE-2023-52953 is a path traversal vulnerability (CWE-22) in the Medialibrary module. Successful exploitation affects integrity and confidentiality, with a CVSS v3.1 base score of 6.2 (AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The vulnerability was published on 2025-01-08.
A local attacker can exploit this vulnerability with low attack complexity, requiring no privileges or user interaction. Exploitation leads to high-impact disruption of availability, alongside effects on integrity and confidentiality as stated in the description.
The Huawei consumer support bulletin provides details on mitigation: https://consumer.huawei.com/en/support/bulletin/2025/1/.
Details
- CWE(s)