CVE-2023-24517: falha de média gravidade em Artica PFMS Pandora FMS
Remote Code Execution via Unrestricted File Upload
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.4epss 1.0%
Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
Produtos afetados
Artica PFMS · Pandora FMSCVEs relacionadas — Artica PFMS Pandora FMS
No mesmo produto, das mais perigosas para as menos.
CVE-2022-1648MEDIUMRelative Path Traversal to Remote Code Execution in File ManagerEPSS 1.4%CVE-2022-0507MEDIUMVulnerability: Authenticated SQL Injection in APIEPSS 1.2%CVE-2022-43979MEDIUMPath Traversal leading to Local File InclusionEPSS 0.8%CVE-2022-26310HIGHImproper Authorization in User Management to Vertical Privilege EscalationEPSS 0.7%CVE-2023-2807MEDIUMAuthentication bypass in password reset processEPSS 0.6%CVE-2022-45436MEDIUMStored cross-site scripting vulnerability in network maps editor featureEPSS 0.6%