CVE-2023-29152 PTC Vuforia Studio Improper Authorization

By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account...

CVE-2023-29152 PTC Vuforia Studio Improper Authorization

By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account...

CVE-2023-29152

CVE-2023-29152 affects PTC Vuforia Studio (all versions prior to 9.9). The vulnerability stems from altering the filename parameter in a request, enabling an attacker to delete arbitrary files with the Vuforia server account’s permissions. Impact is file deletion with potential persistence risk a...