CVE-2023-41793CWE-35

Path Traversal and Untrusted Upload File

Medium · published March 19, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
31.8
In the wild
Unconfirmed
What it is

: Path Traversal vulnerability in Pandora FMS on all allows Path Traversal. This vulnerability allowed changing directories and creating files and downloading them outside the allowed directories. This issue affects Pandora FMS: from 700 through <776.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00389 · 31.8th percentile
Weakness
CWE-35 · Path Traversal: '.../...//'
Published
2024-03-19T16:34Z
EPSS history
Timeline
  • 19 MAR 16:34Z
    Path Traversal and Untrusted Upload File
    cvelistv5