CVE-2023-41629

CVE-2023-41629 concerns a path traversal vulnerability in the file download feature of eSST Monitoring v2.147.1, caused by a lack of input sanitizing. The issue is documented across multiple sources in the connected set, which consistently describe a path traversal risk that could be exploited vi...

CVE-2023-41631

CVE-2023-41631 affects eSST Monitoring v2.147.1. The vulnerability is a remote code execution (RCE) via the file upload function. Reported CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low complexity, privileges required: LOW, no user interaction, and impact to confidentiality, in...

CVE-2023-41630

CVE-2023-41630 affects eSST Monitoring v2.147.1, where the Gii code generator component enables a remote code execution (RCE) vulnerability. The issue is described as an RCE via Gii, with high impact on confidentiality, integrity, and availability as reflected in the CVSS 3.1 score. Public source...