CVE-2023-23314: Improper Limitation of a Pathname to a Restricted Directory

An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file...

CVE-2023-23314

CVE-2023-23314 affects zdir v3.2.0 and is described as an arbitrary file upload vulnerability in the /api/upload component that allows code execution via a crafted .ssh file. The available documents consistently reference this flaw and the affected version, but do not provide a vendor patch/versi...

CVE-2023-23314

An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file...

PT-2023-6804

Name of the Vulnerable Software and Affected Versions zdir version 3.2.0 Description The issue is related to an arbitrary file upload vulnerability in the /api/upload component. This vulnerability exists due to incorrect restriction of the directory path name with limited access. Exploitation of...