Lucene search
PRIOn knowledge basePRION:CVE-2023-48249HistoryJan 10, 2024 - 11:15 a.m.
Design/Logic Flaw
2024-01-1011:15:00
PRIOn knowledge base
www.prio-n.com
2
vulnerability
authenticated
remote attacker
arbitrary folders
system paths
application os user
root
crafted http request
session cookies
active users
The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request.
By abusing this vulnerability, it is possible to steal session cookies of other active users.
Related
cve
cve
CVE-2023-48249
2024-01-10 11:15:10
cvelist
cvelist
CVE-2023-48249
2024-01-10 10:42:03
nvd
nvd
CVE-2023-48249
2024-01-10 11:15:10