Lucene search
HistoryOct 26, 2023 - 11:15 p.m.
CVE-2023-27170
cve-2023-27170
xpand it
write-back manager
directory traversal
vulnerability
security
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0005 Low
EPSS
Percentile
19.2%
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter.
Affected configurations
Node
xpand-itwrite-back_managerMatch2.3.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| xpand-it:write-back_manager | xpand-it write-back manager | eq | 2.3.1 |
Related
cvelist
cvelist
CVE-2023-27170
2023-10-26 00:00:00
nvd
nvd
CVE-2023-27170
2023-10-26 23:15:09
prion
prion
Directory traversal
2023-10-26 23:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0005 Low
EPSS
Percentile
19.2%
Related for CVE-2023-27170