11 matches found
CVE-2023-41717
CVE-2023-41717 Zscaler Proxy 버전 3.6.1.25 및 이전 버전의 부적절한 파일 형식 제어로 인해 로컬 공격자가 파일 다운로드/업로드 제한을 우회할 수 있습니다. 요약 2022년 여름, 저는 Zscaler 프록시버전 3.6.1.25 및 이전 버전에 영향을 미치는 취약점을 발견했습니다. 이 취약점을 통해 로컬 공격자는 Burp과 같은 도구나 BITSBackground Intelligent Transfer Service 프로토콜에 의존하는 Bitsadmin과 같은 기본 Microsoft 유틸리티를 사용하여...
EUVD-2023-46209
Malicious code in bioql PyPI...
Zscaler Proxy Security Bypass Vulnerability
Zscaler Proxy is a proxy application from Zscaler Inc. A security bypass vulnerability exists in Zscaler Proxy, which can be exploited by attackers to bypass file download or upload restrictions...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
Design/Logic Flaw
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
CVE-2023-41717
CVE-2023-41717 affects Zscaler Proxy (versions 3.6.1.25 and prior). The vulnerability stems from improper file-type handling that lets local attackers bypass download/upload restrictions. PoC evidence describes bypass via byte-range/partial content reconstruction (Range header) and Microsoft BITS...
Zscaler Proxy 安全漏洞
Zscaler Proxy is a proxy application from Zscaler Inc. A security bypass vulnerability exists in Zscaler Proxy, which can be exploited by attackers to bypass file download or upload restrictions...
