Skip to content
OpenAdvisories

Product · PTC

Vuforia Studio

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.7
    CVE-2023-31200

    PTC Vuforia Studio Cross-Site Request Forgery

    PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery attack or a replay attack.

    PTC Vuforia Studio
  • Medium 6.2
    CVE-2023-29502

    PTC Vuforia Studio Path Traversal

    Before importing a project into Vuforia, a user could modify the “resourceDirectory” attribute in the appConfig.json file to be a different path.

    PTC Vuforia Studio
  • Medium 6.2
    CVE-2023-29152

    PTC Vuforia Studio Improper Authorization

    By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account.

    PTC Vuforia Studio