Unrestricted file upload

2023-11-2315:15:00

PRIOn knowledge base

www.prio-n.com

file upload

dangerous type

access control

code execution

php

pandora fms

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.0%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allows attackers to execute code via PHP file uploads. This issue affects Pandora FMS: from 700 through 773.

CPENameOperatorVersion
pandora_fmsge700
pandora_fmslt774

CPE	Name	Operator	Version
	pandora_fms	ge	700
	pandora_fms	lt	774

References

pandorafms.com/en/security/common-vulnerabilities-and-exposures/