Lucene search
HistoryJul 10, 2023 - 2:15 a.m.
CVE-2023-37288
cve-2023-37288
smartbpm.net
path traversal
file download
vulnerability
nvd
security
exploit
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
45.2%
SmartBPM.NET component has a vulnerability of path traversal within its file download function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files.
Affected configurations
Node
smartsoftsmartbpm.netMatch6.70
| CPE | Name | Operator | Version |
|---|---|---|---|
| smartsoft:smartbpm.net | smartsoft smartbpm.net | eq | 6.70 |
CNA Affected
[
{
"vendor": "SmartSoft",
"product": "SmartBPM.NET ",
"versions": [
{
"version": " 6.70",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2023-37288
2023-07-10 02:15:45
prion
prion
Path traversal
2023-07-10 02:15:00
cvelist
cvelist
CVE-2023-37288 SmartBPM.NET - Path Traversal
2023-07-10 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
45.2%
Related for CVE-2023-37288