CVE-2023-41717

CVE-2023-41717 Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions. Executive Summary During the summer of 2022, I have found a vulnerability affecting the ZScaler proxy versions 3.6.1.25 and prior. This...

EUVD-2023-46209

Malicious code in bioql PyPI...

Zscaler Proxy Security Bypass Vulnerability

Zscaler Proxy is a proxy application from Zscaler Inc. A security bypass vulnerability exists in Zscaler Proxy, which can be exploited by attackers to bypass file download or upload restrictions...

CVE-2023-41717

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

CVE-2023-41717

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

CVE-2023-41717

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

Design/Logic Flaw

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

CVE-2023-41717: Files or Directories Accessible to External Parties

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

CVE-2023-41717

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

CVE-2023-41717

CVE-2023-41717 affects Zscaler Proxy (versions 3.6.1.25 and prior). The vulnerability stems from improper file-type handling that lets local attackers bypass download/upload restrictions. PoC evidence describes bypass via byte-range/partial content reconstruction (Range header) and Microsoft BITS...

Zscaler Proxy security vulnerability

Zscaler Proxy is a proxy application from Zscaler Inc. A security bypass vulnerability exists in Zscaler Proxy, which can be exploited by attackers to bypass file download or upload restrictions...

CVE-2023-41717

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...