CVE-2023-4748: Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal

Published Sep 5, 2023

Updated

A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file PrintTemplateFileServlet.java. The manipulation of the argument filePath leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238637 was assigned to this vulnerability.

Affected Software

1 affected component

Yonyou Ufida-nc

Event History

Sep 5, 2023

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-4748?

CVE-2023-4748 has been classified as a critical vulnerability.

How do I fix CVE-2023-4748?

To mitigate CVE-2023-4748, it is recommended to update to the latest version of Yongyou UFIDA-NC that addresses this vulnerability.

What impact does CVE-2023-4748 have?

CVE-2023-4748 allows for path traversal due to improper handling of the filePath argument in PrintTemplateFileServlet.java.

What versions are affected by CVE-2023-4748?

CVE-2023-4748 affects Yongyou UFIDA-NC versions up to 20230807.

Can CVE-2023-4748 lead to data exposure?

Yes, CVE-2023-4748 can potentially lead to unauthorized access and data exposure through arbitrary file reads.