CVE-2023-41788

HIGH

Pandora FMS 700-773 - Unauthenticated Remote Code Execution via PHP File Upload

Title source: llm
STIX 2.1

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allows attackers to execute code via PHP file uploads. This issue affects Pandora FMS: from 700 through 773.

References (1)

Core 1
Core References

Scores

CVSS v3 7.6
EPSS 0.0072
EPSS Percentile 49.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Details

CWE
CWE-434
Status published
Products (1)
artica/pandora_fms 700 - 774
Published Nov 23, 2023
Tracked Since Feb 18, 2026