CVE-2023-27170

概要

参考情報

• balwurk.com/cve-2023-27170-improper-limitation-of-a-pathname-to-a-restricted-directory · Exploit
• ghostline.neocities.org/CVE-2023-27170

write-back manager のその他の脆弱性

• CVE-2023-27168緊急 9.8An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp fi…
• CVE-2023-27172緊急 9.1Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to s…
• CVE-2023-27169中 6.5Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and pre…