147 matches found
CVE-2023-31448
A path traversal vulnerability was identified in the HL7 sensor in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the HL7 sensor into behaving differently for existing files and non-existing files. This made it possible to traverse paths,...
CVE-2023-31448
A path traversal vulnerability was identified in the HL7 sensor in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the HL7 sensor into behaving differently for existing files and non-existing files. This made it possible to traverse paths,...
Paessler PRTG Network Monitor Path Traversal Vulnerability
Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler, Germany. A path traversal vulnerability exists in Paessler PRTG Network Monitor version 23.2.83.1760, which stems from the creation of an HL7 sensor that allows the user to set the HL7 messa...
Paessler PRTG Network Monitor Command Injection Vulnerability
Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler, Germany. A command injection vulnerability exists in Paessler PRTG Network Monitor version 23.2.83.1760, which stems from command line parameter injection and undocumented debug feature flag...
PT-2023-23333 · Prtg · Prtg
Name of the Vulnerable Software and Affected Versions: PRTG versions 23.2.84.1566 and earlier Description: A path traversal vulnerability was identified in the HL7 sensor where an authenticated user with write permissions could trick the sensor into behaving differently for existing files and...
CVE-2023-31448
CVE-2023-31448 affects Paessler PRTG Network Monitor: the HL7 sensor in version 23.2.84.1566 and earlier allows an authenticated user with write privileges to manipulate HL7 input and cause path traversal, enabling execution of files outside the designated custom sensors folder. This results in p...
Path Traversal
org.hl7.fhir.r4b is vulnerable to Path Traversal. The vulnerability exists in the unzip function of TerminologyCacheManager.java, which allows an attacker to access files outside the expected directory bypassing the zip slip protection implemented in the CVE-2023-24057...
ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0 <=5.6.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (=5.6.5) +127 more potentially affected by CVE-2023-24057 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=0.0.1 <=5.6.105)
ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =0.0.1, =4.0.0, =4.1.0, =4.0.3, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =5.1.0, =5.3.0, =4.0.0, =4.1.0, =4.0.0, =4.0.0, =5.4.0 and more Source cves: CVE-2023-24057, CVE-2023-28465 Source advisory: OSV:GHSA-9654-PR4F-GH6M...
PT-2023-21736 · Unknown · Hl7 Fhir Core Libraries
Name of the Vulnerable Software and Affected Versions: HL7 FHIR Core Libraries versions prior to 5.6.106 Description: The issue allows attackers to copy arbitrary files to certain directories via directory traversal, if an allowed directory name is a substring of the directory name chosen by the...
CVE-2023-24057
HL7 Health Level 7 FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive for a prepackaged terminology cache, NPM package, or comparison archive...
Directory traversal
HL7 Health Level 7 FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive for a prepackaged terminology cache, NPM package, or comparison archive...
CVE-2023-24057
HL7 Health Level 7 FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive for a prepackaged terminology cache, NPM package, or comparison archive...
CVE-2023-24057
HL7 Health Level 7 FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive for a prepackaged terminology cache, NPM package, or comparison archive...
CVE-2023-24057
HL7 FHIR Core Libraries are affected by a directory-traversal issue in package-decompression. Affected: versions prior to 5.6.106 (per PT-2023-21736); earlier notes reference 5.6.92. Root cause: extraction of archives (ZIP/TGZ) can write files to arbitrary directories. Mitigation: upgrade to 5.6....
CVE-2023-24057
HL7 Health Level 7 FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive for a prepackaged terminology cache, NPM package, or comparison archive...
ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0 <=6.4.0), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5 <=6.4.0) +164 more potentially affected by CVE-2023-24057 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=0.0.1 <=5.6.91)
ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =0.0.1, =4.0.0, =5.6.5, =4.1.0, =4.0.3, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =5.3.0, =4.0.0, =4.1.0, =6.4.0 and more Source cves: CVE-2023-24057 Source advisory: OSV:GHSA-JQH6-9574-5X22...
ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0 <=6.4.0), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5 <=6.4.0) +139 more potentially affected by CVE-2023-24057 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=0.0.1 <=5.6.91)
ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version =0.0.1, =4.0.0, =5.6.5, =4.1.0, =4.0.0, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =5.3.0, =4.0.0, =4.0.0, =6.4.0 and more Source cves: CVE-2023-24057 Source advisory: OSV:GHSA-JQH6-9574-5X22...
ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0 <=6.4.0), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=5.6.5 <=6.4.0) +133 more potentially affected by CVE-2023-24057 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=1.0.0 <=5.6.91)
ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =1.0.0, =4.0.0, =5.6.5, =4.1.0, =4.1.0, =4.0.0, =5.0.0, =4.0.0, =5.3.0, =6.2.0, =5.1.0, =5.3.0, =4.0.0, =4.0.0, =4.0.0, =5.4.0 and more Source cves: CVE-2023-24057 Source advisory: OSV:GHSA-JQH6-9574-5X22...
