Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:29 a.m.6 views

CVE-2023-26564

The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server...

9.8CVSS7.1AI score0.00369EPSS
Exploits1References1
NVD
NVD
added 2023/07/12 9:15 p.m.7 views

CVE-2023-26564

The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server...

9.8CVSS0.00369EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/07/12 9:15 p.m.0 views

CVE-2023-26564

The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server...

9.8CVSS7.2AI score0.01278EPSS
Exploits2References4
Prion
Prion
added 2023/07/12 9:15 p.m.10 views

Directory traversal

The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server...

7.5CVSS9.4AI score0.01278EPSS
Exploits2References3
CVE
CVE
added 2023/07/12 12:0 a.m.35 views

CVE-2023-26564

The CVE-2023-26564 entry concerns Syncfusion EJ2 ASPCore File Provider 3ac357f. Affected component: Models/PhysicalFileProvider.cs, with a directory traversal flaw that allows an unauthenticated attacker to list files, download any file, or upload files to directories the web server can access. C...

9.8CVSS9.4AI score0.00369EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/07/12 12:0 a.m.12 views

CVE-2023-26564

The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server...

9.7AI score0.00369EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/07/12 12:0 a.m.8 views

CVE-2023-26564

The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server...

7AI score0.00369EPSS
Exploits1References3
Rows per page
Query Builder