CVE-2023-27170

Summary

Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://balwurk.com/cve-2023-27170-improper-limitation-of-a-pathname-to-a-restricted-directory/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://balwurk.com/cve-2023-27170-improper-limitation-of-a-pathname-to-a-restricted-directory/
• https://ghostline.neocities.org/CVE-2023-27170/

• ←Previous
• Next→