CVE-2023-41812

MEDIUM

Artica Pandora Fms < 774 - Unrestricted File Upload

Title source: rule
STIX 2.1

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allowed PHP executable files to be uploaded through the file manager. This issue affects Pandora FMS: from 700 through 773.

References (1)

Core 1
Core References

Scores

CVSS v3 5.7
EPSS 0.0004
EPSS Percentile 11.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L

Details

CWE
CWE-434
Status published
Products (1)
artica/pandora_fms 700 - 774
Published Nov 23, 2023
Tracked Since Feb 18, 2026