CVE-2023-39026: Path Traversal
Published Aug 22, 2023
·Updated
Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive information via a crafted request to the /mgmt/ component.
Credit
Bryce Raindayzz Harty
Affected Software
2 affected components
FileMage FileMage<=1.10.8
Microsoft Windows
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Sep 4, 2023
Exploit Published
12:00 AM
Known Exploited
12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-39026?
CVE-2023-39026 has been rated as a high-severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2023-39026?
To fix CVE-2023-39026, users should upgrade to FileMage Gateway version 1.10.9 or later.
3
What types of attacks can exploit CVE-2023-39026?
CVE-2023-39026 can be exploited through crafted HTTP requests that manipulate directory paths.
4
Which versions of FileMage are affected by CVE-2023-39026?
All versions of FileMage Gateway up to and including 1.10.8 are affected by CVE-2023-39026.
5
What kind of information can be exposed by CVE-2023-39026?
CVE-2023-39026 can allow attackers to access sensitive files and information on the server.