CVE-2023-41793 MEDIUM

CVE-2023-41793: Path Traversal and Untrusted Upload File

Vendor Pandora Fms

Product Pandora FMS

Weakness CWE-35

Published March 19, 2024

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

6.7/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

What the vulnerability does

01Description

: Path Traversal vulnerability in Pandora FMS on all allows Path Traversal. This vulnerability allowed changing directories and creating files and downloading them outside the allowed directories. This issue affects Pandora FMS: from 700 through <776.

Key dates

02Disclosure timeline

March 19, 2024 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-41793 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/35.html

Related vulnerabilities

04Related CVE

CVE-2026-32415 WordPress Squeeze plugin <= 1.7.7 - Directory Traversal vulnerability CVE-2024-49770 oak's path traversal allows transfer of hidden files within the served root directory CVE-2024-56049 WordPress WPLMS plugin < 1.9.9.5.2 - Subscriber+ Arbitrary File Deletion vulnerability CVE-2024-41972 WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices CVE-2025-58972 WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.10.4 - Path Traversal vulnerability