CVE-2023-45723: Path Traversal which allows file upload capability affects DRYiCE MyXalytics
First published: Wed Jan 03 2024(Updated: )
HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability. Certain endpoints permit users to manipulate the path (including the file name) where these files are stored on the server.
Credit: psirt@hcl.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hcltech Dryice Myxalytics | =5.9 | |
| Hcltech Dryice Myxalytics | =6.0 | |
| Hcltech Dryice Myxalytics | =6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- agent/weakness
- collector/mitre-cve
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/hcltech
- canonical/hcltech dryice myxalytics
- version/hcltech dryice myxalytics/5.9
- version/hcltech dryice myxalytics/6.0
- version/hcltech dryice myxalytics/6.1