Vulnerability · Published Mar 19, 2024 · Assigned by PandoraFMS
CVE-2023-41793Path Traversal and Untrusted Upload File
Medium 6.7
In plain English
A medium-severity security flaw in Pandora FMS from Pandora FMS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.4%top 66.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
: Path Traversal vulnerability in Pandora FMS on all allows Path Traversal. This vulnerability allowed changing directories and creating files and downloading them outside the allowed directories. This issue affects Pandora FMS: from 700 through <776.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Pandora FMS | Pandora FMS | 700 – through <776 |
Weakness: CWE-35 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L