CVE-2023-5136: An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by…

PriorityP424medium5.5CVSS 3.1

AVLACLPRNUIRSUCHINAN

EPSS

0.25%

16.5th percentile

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.

Affected

30 ranges· showing 25

Vendor	Product	Version range	Fixed in
ni	diadem	< 2023 Q2	2023 Q2
ni	diadem	—	—
ni	diadem	—	—
ni	diadem	—	—
ni	diadem	—	—
ni	diadem	—	—
ni	diadem	—	—
ni	diadem	—	—
ni	diadem	—	—
ni	diadem	—	—
ni	flexlogger	<= 2023 Q4	—
ni	flexlogger	—	—
ni	flexlogger	—	—
ni	flexlogger	—	—
ni	flexlogger	—	—
ni	flexlogger	—	—
ni	flexlogger	—	—
ni	topografix_data_plugin	—	—
ni	topografix_dataplugin_for_gpx	< 2023 Q4	2023 Q4
ni	veristand	<= 2023 Q4	—
ni	veristand	—	—
ni	veristand	—	—
ni	veristand	—	—
ni	veristand	—	—
ni	veristand	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.