CVE-2023-41812

MEDIUM

Pandora FMS 700-773 - Unrestricted Upload of File with Dangerous Type via File Manager

Title source: llm
STIX 2.1

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allowed PHP executable files to be uploaded through the file manager. This issue affects Pandora FMS: from 700 through 773.

References (1)

Core 1
Core References

Scores

CVSS v3 5.7
EPSS 0.0057
EPSS Percentile 43.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L

Details

CWE
CWE-434
Status published
Products (1)
artica/pandora_fms 700 - 774
Published Nov 23, 2023
Tracked Since Feb 18, 2026