VULNERABILITY INTELLIGENCE

CVE-2023-41812

CVSS score5.7 MEDIUM
EPSS probability0.57%
CISA KEVNot currently listed
Published2023-11-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allowed PHP executable files to be uploaded through the file manager. This issue affects Pandora FMS: from 700 through 773.

Weakness classification

  • security@pandorafms.com: CWE-434
  • nvd@nist.gov: CWE-434

Primary references