CVE-2023-45723: high-severity vulnerability in HCL Software DRYiCE MyXalytics
Path Traversal which allows file upload capability affects DRYiCE MyXalytics
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
DRYiCE MyXalytics has a vulnerability that lets attackers upload files to unintended locations on the server by manipulating file paths. This allows them to potentially overwrite important files or execute malicious code.
A path traversal flaw in DRYiCE MyXalytics file upload endpoints permits unauthenticated or authenticated users to specify arbitrary file paths during upload operations, enabling placement of files outside intended directories. The vulnerability stems from insufficient input validation on file path parameters, potentially leading to remote code execution or unauthorized file system access.
In the same product, most dangerous first.