Lucene search
MitreCVELIST:CVE-2023-45880HistoryNov 14, 2023 - 12:00 a.m.
CVE-2023-45880
2023-11-1400:00:00
mitre
www.cve.org
cve-2023-45880
gibbonedu
report template builder
asset component
template file destination
php files
webroot
0.0005 Low
EPSS
Percentile
19.1%
GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension). This allows creation of PHP files outside of the uploads directory, directly in the webroot.
Related
osv
osv
CVE-2023-45880
2023-11-14 06:15:29
nvd
nvd
CVE-2023-45880
2023-11-14 06:15:29
cve
cve
CVE-2023-45880
2023-11-14 06:15:29
prion
prion
Directory traversal
2023-11-14 06:15:00