What’s Vulnerable › Vulnerabilities

CVE-2023-23565

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-08-22 · updated 2026-06-17
• Weakness: CWE-98

Description

An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to retrieve PHP files from the server via Local File Inclusion.

Affected products

• Geomatika Isigeo Web: 6.0

References

• https://github.com/Orange-Cyberdefense/CVE-repository
• https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_geomatika_isigeoweb.md
• https://www.geomatika.fr/isigeo-web/
• https://github.com/Orange-Cyberdefense/CVE-repository
• https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_geomatika_isigeoweb.md
• https://www.geomatika.fr/isigeo-web/

Get alerted when CVE-2023-23565 or the next vulnerability affects your stack