CVE-2023-41717

CVE-2023-41717 Zscaler Proxy バージョン 3.6.1.25 以前における不適切なファイルタイプ制御により、ローカル攻撃者がファイルのダウンロード/アップロード制限をバイパスできる脆弱性。 エグゼクティブサマリー 2022年夏、私は ZScaler プロキシ（バージョン 3.6.1.25 以前）に影響する脆弱性を発見しました。この脆弱性により、ローカル攻撃者は Burp などのツールや、Background Intelligent Transfer Service（BITS）プロトコルを利用する Microsoft 標準の Bitsadmin...

EUVD-2023-46209

Malicious code in bioql PyPI...

Zscaler Proxy Security Bypass Vulnerability

Zscaler Proxy is a proxy application from Zscaler Inc. A security bypass vulnerability exists in Zscaler Proxy, which can be exploited by attackers to bypass file download or upload restrictions...

CVE-2023-41717

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

CVE-2023-41717

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

CVE-2023-41717

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

Design/Logic Flaw

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

CVE-2023-41717

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

CVE-2023-41717: Files or Directories Accessible to External Parties

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...

CVE-2023-41717

CVE-2023-41717 affects Zscaler Proxy (versions 3.6.1.25 and prior). The vulnerability stems from improper file-type handling that lets local attackers bypass download/upload restrictions. PoC evidence describes bypass via byte-range/partial content reconstruction (Range header) and Microsoft BITS...

Zscaler Proxy 安全漏洞

Zscaler Proxy is a proxy application from Zscaler Inc. A security bypass vulnerability exists in Zscaler Proxy, which can be exploited by attackers to bypass file download or upload restrictions...

CVE-2023-41717

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...