Lucene search
HistoryNov 23, 2023 - 3:15 p.m.
CVE-2023-41788
pandora fms
file upload
code execution
vulnerability
php files
acls
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
23.6%
Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allows attackers to execute code via PHP file uploads. This issue affects Pandora FMS: from 700 through 773.
Affected configurations
Node
articapandora_fmsRange700–774
| Vendor | Product | Version | CPE |
|---|---|---|---|
| artica | pandora_fms | * | cpe:2.3:a:artica:pandora_fms:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-41788
2023-11-23 15:15:08
prion
prion
Unrestricted file upload
2023-11-23 15:15:00
cvelist
cvelist
CVE-2023-41788 Remote Code Execution via File Uploader
2023-11-23 14:33:44
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
23.6%
Related for NVD:CVE-2023-41788