CVE-2023-3098

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restore_all_sound_file. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.2-0kylin6k70-23 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230688. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-24
• CWE-22

• https://github.com/i900008/vulndb/blob/main/kylinos_vul3.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.230688Permissions Required, Third Party Advisory
• https://vuldb.com/?id.230688Third Party Advisory
• https://github.com/i900008/vulndb/blob/main/kylinos_vul3.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.230688Permissions Required, Third Party Advisory
• https://vuldb.com/?id.230688Third Party Advisory

Published

Jun 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30967Gotham Orbital-Simulator service prior to 0.692.0 was found …7.5
• CVE-2023-30968One of Gotham Gaia services was found to be vulnerable to a …6.8
• CVE-2023-30969The Palantir Tiles1 service was found to be vulnerable to a…6.5
• CVE-2023-3097A vulnerability was found in KylinSoft kylin-software-proper…7.8
• CVE-2023-30970Gotham Table service and Forward App were found to be vulner…6.5
• CVE-2023-30971Gotham Gaia application was found to be exposing multiple un…6.8
• CVE-2023-30985A vulnerability has been identified in Solid Edge SE2023 (Al…5.5
• CVE-2023-30986A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
• CVE-2023-30987IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Se…7.5
• CVE-2023-30988The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support f…7.8
• CVE-2023-30989IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains …7.8
• CVE-2023-3099A vulnerability classified as critical was found in KylinSof…7.1