Path Traversal
Security incidents tagged Path Traversal. Newest first.
0 Path Traversal incidents in the last 12 months
- Incidents
- 4
- Live
- 0
- Patched
- 4
- Days without an incident
- 1051
- Longest quiet run: 1051 days (Dec 8–Oct 23)
Show 4 older incidents4 older incidents
December 2023 1
PatchedQlik Sense: 2 exploited vulnerabilities (CVE-2023-41265, CVE-2023-41266)
Qlik Sense
Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software. Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow the attacker to send further requests to unauthorized endpoints. Added to CISA KEV on 2023-12-07. CISA lists known use in ransomware campaigns.
Open incident →CVE-2023-41265 · CVE-2023-41266
November 2023 1
PatchedSysAid Server: Path Traversal (CVE-2023-47246)
SysAid Server
SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution. Added to CISA KEV on 2023-11-13. CISA lists known use in ransomware campaigns.
Open incident →CVE-2023-47246
August 2023 1
PatchedIgnite Realtime Openfire: Path Traversal (CVE-2023-32315)
Ignite Realtime Openfire
Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users. Added to CISA KEV on 2023-08-24.
Open incident →CVE-2023-32315
March 2023 1
PatchedFortinet FortiOS: Path Traversal (CVE-2022-41328)
Fortinet FortiOS
Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands. Added to CISA KEV on 2023-03-14.
Open incident →CVE-2022-41328
