Skip to content
OpenAdvisories
High · 7.6 CVE-2023-41788 EUVD-2023-46280GHSA-43vm-xh53-958r

Remote Code Execution via File Uploader

Published Nov 23, 2023 · Updated Aug 2, 2024 · Assigned by PandoraFMS

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allows attackers to execute code via PHP file uploads. This issue affects Pandora FMS: from 700 through 773.

Affected products

VendorProductAffectedFixed
Pandora FMS Pandora FMS 700 – ≤ 773 —

References