Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2023-28465
HistoryDec 12, 2023 - 5:15 p.m.

CVE-2023-28465

2023-12-1217:15:07
CWE-22
mitre
web.nvd.nist.gov
3154
hl7
fhir core libraries
cve-2023-28465
security vulnerability
file copy
directory traversal
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

61.6%

JSON

The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to certain directories via directory traversal, if an allowed directory name is a substring of the directory name chosen by the attacker. NOTE: this issue exists because of an incomplete fix for CVE-2023-24057.

Affected configurations

Nvd
Node
hapifhirhl7_fhir_coreRange<5.6.106
VendorProductVersionCPE
hapifhirhl7_fhir_core*cpe:2.3:a:hapifhir:hl7_fhir_core:*:*:*:*:*:*:*:*

Related

veracode 2
prion 2
nvd 2
cvelist 2
osv 5
github 2
gitlab 6
cve 1
veracode
veracode
Path Traversal
2023-03-19 07:29:59
Man-in-the-Middle (MitM)
2023-01-26 02:11:57
prion
prion
Directory traversal
2023-12-12 17:15:00
Directory traversal
2023-01-26 21:18:00
nvd
nvd
CVE-2023-28465
2023-12-12 17:15:07
CVE-2023-24057
2023-01-26 21:18:15
cvelist
cvelist
CVE-2023-28465
2023-12-12 00:00:00
CVE-2023-24057
2023-01-24 00:00:00
osv
osv
CVE-2023-28465
2023-12-12 17:15:07
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057
2023-03-10 22:15:55
CVE-2023-24057
2023-01-26 21:18:15
github
github
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057
2023-03-10 22:15:55
MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`
2023-01-23 22:05:28
gitlab
gitlab
Relative Path Traversal
2023-01-23 00:00:00
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
2023-01-23 00:00:00
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
2023-01-23 00:00:00
cve
cve
CVE-2023-24057
2023-01-26 21:18:15

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

61.6%

JSON
Related for CVE-2023-28465
veracode2prion2nvd2cvelist2osv5github2gitlab6cve1