Логотип exploitDog
bind:CVE-2023-42000
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-42000

Количество 2

Количество 2

nvd логотип

CVE-2023-42000

около 2 лет назад

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-4xpq-wqf9-p6mv

около 2 лет назад

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-42000

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.

CVSS3: 9.8
1%
Низкий
около 2 лет назад
github логотип
GHSA-4xpq-wqf9-p6mv

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.

CVSS3: 6.5
1%
Низкий
около 2 лет назад

Уязвимостей на страницу