high7.5Public exploit code
CVE-2023-39026
Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive information via a cr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FileMage Gateway 1.10.9 - Local File Inclusion2023-09-04 · webapps · multiple
Impact
Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive information via a crafted request to the /mgmt/ component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Filemage | Filemage | through 1.10.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/174491/FileMage-Gateway-1.10.9-Local-File-Inclusion.html
- https://raindayzz.com/technicalblog/2023/08/20/FileMage-Vulnerability.html
- https://www.filemage.io/docs/updates.html#change-log
- http://packetstormsecurity.com/files/174491/FileMage-Gateway-1.10.9-Local-File-Inclusion.html
- https://raindayzz.com/technicalblog/2023/08/20/FileMage-Vulnerability.html
- https://www.filemage.io/docs/updates.html#change-log