CVE-2023-45723: Path Traversal which allows file upload capability affects DRYiCE MyXalytics
HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability. Certain endpoints permit users to manipulate the path (including the file name) where these files are stored on the server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45723?
CVE-2023-45723 is classified as a path traversal vulnerability, which can potentially lead to unauthorized file access.
How do I fix CVE-2023-45723?
To fix CVE-2023-45723, ensure proper validation of file upload paths and restrict user access to sensitive directories.
What versions of HCL DRYiCE MyXalytics are affected by CVE-2023-45723?
CVE-2023-45723 impacts HCL DRYiCE MyXalytics versions 5.9, 6.0, and 6.1.
Can CVE-2023-45723 lead to data breaches?
Yes, if exploited, CVE-2023-45723 could allow attackers to gain unauthorized access to sensitive files, leading to potential data breaches.
Who should be concerned about CVE-2023-45723?
Organizations using affected versions of HCL DRYiCE MyXalytics should be concerned about CVE-2023-45723 and take immediate action to mitigate it.