Lucene search
Veracode Vulnerability DatabaseVERACODE:43105HistorySep 04, 2023 - 10:52 a.m.
Path Traversal
2023-09-0410:52:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
graylog
path traversal
http api
vulnerable
user input
sensitive files
3.8 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
36.4%
org.graylog, graylog-project-parent is vulnerable to Path Traversal. The vulnerability exists because it does not properly validate user input in the HTTP API resource, which allows an attacker to overwrite or modify sensitive files in the system.
Related
osv
osv
CVE-2023-41044
2023-08-31 18:15:09
cve
cve
CVE-2023-41044
2023-08-31 18:15:09
github
github
prion
prion
Path traversal
2023-08-31 18:15:00
cvelist
cvelist
nvd
nvd
CVE-2023-41044
2023-08-31 18:15:09
3.8 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
36.4%
Related for VERACODE:43105