Unrestricted file upload

2023-11-2315:15:00

PRIOn knowledge base

www.prio-n.com

file upload

dangerous type

pandora fms

acls

php

vulnerability

nvd

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.4%

JSON

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allowed PHP executable files to be uploaded through the file manager. This issue affects Pandora FMS: from 700 through 773.

CPENameOperatorVersion
pandora_fmsge700
pandora_fmslt774

CPE	Name	Operator	Version
	pandora_fms	ge	700
	pandora_fms	lt	774

References

pandorafms.com/en/security/common-vulnerabilities-and-exposures/