CVE-2023-28371: Path Traversal
Published Mar 15, 2023
·Updated
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.
Affected Software
1 affected component
Stellarium Stellarium<=1.2
Remediation
Event History
Mar 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-28371?
CVE-2023-28371 has a potential high severity due to its ability to write to unintended files.
2
How do I fix CVE-2023-28371?
To fix CVE-2023-28371, ensure you update Stellarium to the latest version that addresses this vulnerability.
3
Which versions of Stellarium are affected by CVE-2023-28371?
CVE-2023-28371 affects Stellarium versions up to and including 1.2.
4
What kind of attacks can CVE-2023-28371 enable?
CVE-2023-28371 can enable attackers to perform directory traversal to write to unintended files.
5
Who is impacted by CVE-2023-28371?
Users running Stellarium versions 1.2 or earlier are at risk from CVE-2023-28371.