CVE-2023-46808: Malicious File Upload
First published: Sun Mar 31 2024(Updated: )
An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server. Successful exploitation may lead to execution of commands in the context of non-root user.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ivanti Neurons for ITSM | <2023.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2023-41724
- alias/CVE-2023-46808
- alias/CVE-2023-46805
- alias/CVE-2024-21887
- alias/CVE-2024-22024
- alias/CVE-2024-21893
- alias/CVE-2021-22893
- zeroday/true
- agent/news-ai
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- vendor/ivanti
- canonical/ivanti neurons for itsm