28 matches found
CVE-2023-41629
A lack of input sanitizing in the file download feature of eSST Monitoring v2.147.1 allows attackers to execute a path traversal...
CVE-2023-41630
eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...
CVE-2023-41631
eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the file upload function...
CVE-2023-41631
CVE-2023-41631 affects eSST Monitoring v2.147.1. The vulnerability is a remote code execution (RCE) via the file upload function. Reported CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low complexity, privileges required: LOW, no user interaction, and impact to confidentiality, in...
CVE-2023-41629
CVE-2023-41629 concerns a path traversal vulnerability in the file download feature of eSST Monitoring v2.147.1, caused by a lack of input sanitizing. The issue is documented across multiple sources in the connected set, which consistently describe a path traversal risk that could be exploited vi...
eSST Monitoring Code Injection Vulnerability
Sourceforge eSST Monitoring is an open source monitoring system from Sourceforge. A security vulnerability exists in eSST Monitoring version v2.147.1, which stems from a Remote Code Execution RCE vulnerability in the Gii code generator component...
eSST Monitoring Code Issue Vulnerability
Sourceforge eSST Monitoring is an open source monitoring system from Sourceforge. A security vulnerability exists in eSST Monitoring version v2.147.1, which stems from a remote code execution RCE vulnerability in the file upload feature...