CVE-2022-43979 Path Traversal leading to Local File Inclusion

There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that the user has inserted does not contain malicious characteres, but this check is insufficient. An attacker could insert an absolute path to overcome the heck,...

CVE-2022-43979 Path Traversal leading to Local File Inclusion

There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that the user has inserted does not contain malicious characteres, but this check is insufficient. An attacker could insert an absolute path to overcome the heck,...

CVE-2022-43979

CVE-2022-43979 affects Pandora FMS version 7.64 (v7.64). It describes a path traversal leading to Local File Inclusion in a user-input parameter that is insufficiently validated, potentially allowing inclusion of arbitrary PHP files on disk and, as stated, remote code execution. Connected sources...