CVE-2024-25693: Portal for ArcGIS has a directory traversal vulnerability.
There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation may allow a remote, authenticated attacker to traverse the file system to access files or execute code outside of the intended directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25693?
CVE-2024-25693 has a high severity rating due to its potential for file system traversal and remote code execution.
How do I fix CVE-2024-25693?
To fix CVE-2024-25693, update Esri Portal for ArcGIS to version 11.3 or later, which contains a patch for this vulnerability.
Which versions of Esri Portal for ArcGIS are affected by CVE-2024-25693?
CVE-2024-25693 affects Esri Portal for ArcGIS versions 11.2 and below.
What types of attacks can CVE-2024-25693 facilitate?
CVE-2024-25693 can facilitate path traversal attacks that may allow unauthorized file access and code execution.
Who can exploit CVE-2024-25693?
CVE-2024-25693 can be exploited by a remote, authenticated attacker with access to the affected Esri Portal for ArcGIS.