Lucene search
PRIOn knowledge basePRION:CVE-2023-45880HistoryNov 14, 2023 - 6:15 a.m.
Directory traversal
2023-11-1406:15:00
PRIOn knowledge base
www.prio-n.com
3
gibbonedu
directory traversal
report template builder
arbitrary pathname
webroot
php files
GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension). This allows creation of PHP files outside of the uploads directory, directly in the webroot.
Related
osv
osv
CVE-2023-45880
2023-11-14 06:15:29
cvelist
cvelist
CVE-2023-45880
2023-11-14 00:00:00
nvd
nvd
CVE-2023-45880
2023-11-14 06:15:29
cve
cve
CVE-2023-45880
2023-11-14 06:15:29