https://pwn.watch/i/zkteco-biotime-cve-2023-38950 ZKTeco BioTime contains a path traversal vulnerability in the iclock API that allows an unauthenticated attacker to read arbitrary files via supplying a crafted payload. Added to CISA KEV on 2025-05-19. en Mon, 19 May 2025 00:00:00 GMT https://pwn.watch/i/zkteco-biotime-cve-2023-38950 https://pwn.watch/i/zkteco-biotime-cve-2023-38950#2025-05-19-b7645b8f Mon, 19 May 2025 00:00:00 GMT high <p>ZKTeco BioTime: BioTime Path Traversal Vulnerability: CISA added CVE-2023-38950 to the KEV catalog (due 2025-06-09).</p>