CVE-2023-46264

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remove code execution...

CVE-2023-46264

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remove code execution...

CVE-2023-46264

CVE-2023-46264 affects Ivanti/ Avalanche (Wavelink Avalanche) 6.4.1 and earlier. The issue is an unrestricted upload of files with dangerous types in the FileStoreConfig/File upload surface, enabling remote code execution. Public sources in the Connected documents corroborate Bolivia: Red Hat, NV...