12 matches found
CVE-2023-41717
CVE-2023-41717 Zscaler Proxy バージョン 3.6.1.25 以前における不適切なファイルタイプ制御により、ローカル攻撃者がファイルのダウンロード/アップロード制限をバイパスできる脆弱性。 エグゼクティブサマリー 2022年夏、私は ZScaler プロキシ（バージョン 3.6.1.25 以前）に影響する脆弱性を発見しました。この脆弱性により、ローカル攻撃者は Burp などのツールや、Background Intelligent Transfer Service（BITS）プロトコルを利用する Microsoft 標準の Bitsadmin...
EUVD-2023-46209
Malicious code in bioql PyPI...
Zscaler Proxy Security Bypass Vulnerability
Zscaler Proxy is a proxy application from Zscaler Inc. A security bypass vulnerability exists in Zscaler Proxy, which can be exploited by attackers to bypass file download or upload restrictions...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
Design/Logic Flaw
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
CVE-2023-41717: Files or Directories Accessible to External Parties
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
Zscaler Proxy 安全漏洞
Zscaler Proxy is a proxy application from Zscaler Inc. A security bypass vulnerability exists in Zscaler Proxy, which can be exploited by attackers to bypass file download or upload restrictions...
CVE-2023-41717
CVE-2023-41717 affects Zscaler Proxy (versions 3.6.1.25 and prior). The vulnerability stems from improper file-type handling that lets local attackers bypass download/upload restrictions. PoC evidence describes bypass via byte-range/partial content reconstruction (Range header) and Microsoft BITS...
