CWE-552

Files or Directories Accessible to External Parties

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product makes files or directories accessible to unauthorized actors, even though they should not be.

483 vulnerabilities with CWE-552
CVE-2023-23365 HIGH
QNAP Music Station 5.3.0-5.3.21 - Authenticated Path Traversal
CVSS 7.7
CVE-2023-45160 HIGH
1e 1E Client - Resource File Subversion
CVSS 8.8
CVE-2023-20235 MEDIUM
Cisco IOS XE < 17.3.1 - Authenticated Privilege Escalation via Docker Privileged Mode
CVSS 6.5
CVE-2023-5297 LOW
Xinhu RockOA 2.3.2 - Info Disclosure
CVSS 3.7
CVE-2023-43856 HIGH
Dreamer CMS v4.1.3 - Info Disclosure
CVSS 7.5
CVE-2023-3712 MEDIUM
Honeywell PM43 Firmware < P10.19.050004 - Privilege Escalation via Unprotected Files or Directories
CVSS 6.6
CVE-2023-4588 MEDIUM
Delinea Secret Server <11.4.000002 - Info Disclosure
CVSS 6.8
CVE-2023-4743 LOW
Dreamer CMS <4.1.3 - Info Disclosure
CVSS 3.1
CVE-2023-41717 MEDIUM
Zscaler Proxy <3.6.1.25 - Auth Bypass
CVSS 5.5
CVE-2023-4475 HIGH
ASUSTOR Data Master <4.1.0 - Path Traversal
CVSS 7.5
CVE-2023-38952 HIGH
ZKTeco BioTime <9.0.1 - Privilege Escalation
CVSS 7.5
CVE-2023-38948 HIGH
jizhicms 1.9.5 - Arbitrary File Download via PluginsController.php
CVSS 7.2
CVE-2023-37551 MEDIUM
CODESYS Control Runtime - Authenticated Arbitrary File Write via CmpApp Component
CVSS 6.5
CVE-2023-32226 HIGH
SysAid On-Premises < 23.2.14 - Authenticated Arbitrary File Read
CVSS 8.3
CVE-2023-29450 HIGH
Zabbix < 5.0.33 - Unauthorized File System Access via JavaScript Pre-processing
CVSS 8.5
CVE-2023-34316 MEDIUM
Delta Electronics InfraSuite Device Master <1.0.7 - Info Disclosure
CVSS 6.5
CVE-2023-2538 MEDIUM
Tyan S5552 BMC <3.00 - Info Disclosure
CVSS 5.8
CVE-2023-34834 MEDIUM
MCL-Net <4.3.5.8788 - Info Disclosure
CVSS 5.3
CVE-2023-36664 HIGH
Artifex Ghostscript <10.01.2 - Privilege Escalation
CVSS 7.8
CVE-2023-29931 CRITICAL
Laravel-s <3.7.35 - Local File Inclusion
CVSS 9.8
CVE-2023-34645 HIGH
jfinal_cms 5.1.0 - Arbitrary File Read
CVSS 7.5
CVE-2023-2976 MEDIUM
Google Guava <32.0.1 - Info Disclosure
CVSS 5.5
CVE-2023-33568 HIGH
Dolibarr 16.0.0-16.0.4 - Unauthenticated Database Dump via Contact File Access
CVSS 7.5
CVE-2023-32684 LOW
Lima < 0.16.0 - Unauthenticated Arbitrary File Read via Malicious Disk Image
CVSS 2.7
CVE-2023-31066 CRITICAL
Apache InLong <1.6.0 - Info Disclosure
CVSS 9.1
Details
Vulnerabilities 483
Links
MITRE CWE Entry Search this CWE With Exploits