CVE-2023-6252: Hyphensolutions Chameleon Power

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Path traversal vulnerability in Chalemelon Power framework, affecting the getImage parameter. This vulnerability could allow a remote user to read files located on the server and gain access to sensitive information such as configuration files.

Affected products

• Hyphensolutions Chameleon Power: version 1.0 only

Published 2023-11-22. Last modified 2026-06-17.