CVE-2023-45723

Path Traversal which allows file upload capability affects DRYiCE MyXalytics

High · published January 3, 2024

CVSS v3.1
7.6
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability.  Certain endpoints permit users to manipulate the path (including the file name) where these files are stored on the server.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00997 · 62.4th percentile
Published
2024-01-03T02:50Z
EPSS history
Timeline
  • 03 JAN 02:50Z
    Path Traversal which allows file upload capability affects DRYiCE MyXalytics
    cvelistv5