Vulnerabilities

TI-2026-62932 CVE-2026-93340 · GHSA-47ff-wp9w-g26c

Gladys Assistant < 5.1.0 Password Reset Link Poisoning via forgot_password Endpoint

LOW 35

Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain valid password reset tokens for any account by exploiting the client-supplied or…

CVSS 4.0HIGH 7.4 Network No auth User interaction EPSS 0.00528 Published 2026-09-21 Fixed in 5.1.0 CWE-640

TI-2023-25650 CVE-2023-47440 · GHSA-c79f-pqgf-fhp3

Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal.

LOW 31

Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01018 Published 2023-12-07 No fix listed CWE-22

TI-2023-23158 CVE-2023-43256 · GHSA-r67g-g678-mjx5

A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to…

LOW 30

A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-sanitized user input.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00836 Published 2023-09-25 No fix listed CWE-22

Vulnerabilities

Filters

Gladys Assistant < 5.1.0 Password Reset Link Poisoning via forgot_password Endpoint

Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal.

A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to…