ZKTeco BioTime 8.5.4 is missing authentication on folders containing employee photos, allowing an attacker to view them through filename enumeration.Referenceshttps://www.zkteco.me/software-5https://codingkoala.eu/posts/CVE202230515/
