An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local filesystem by sending crafted web requests.
References
| Link | Resource |
|---|---|
| https://medium.com/%40arielbreisacher/my-chart-fx-7-software-investigation-journey-leading-to-a-directory-traversal-vulnerability-067cdcd3f2e9 | Exploit Third Party Advisory |
| https://medium.com/%40arielbreisacher/my-chart-fx-7-software-investigation-journey-leading-to-a-directory-traversal-vulnerability-067cdcd3f2e9 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://medium.com/%40arielbreisacher/my-chart-fx-7-software-investigation-journey-leading-to-a-directory-traversal-vulnerability-067cdcd3f2e9 - Exploit, Third Party Advisory |
09 Feb 2024, 18:21
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-22 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | () https://medium.com/%40arielbreisacher/my-chart-fx-7-software-investigation-journey-leading-to-a-directory-traversal-vulnerability-067cdcd3f2e9 - Exploit, Third Party Advisory | |
| First Time |
Softwarefx chart Fx
Softwarefx |
|
| CPE | cpe:2.3:a:softwarefx:chart_fx:7.0.4962.20829:*:*:*:*:*:*:* |
02 Feb 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-02 10:15
Updated : 2024-11-21 08:15
NVD link : CVE-2023-39611
Mitre link : CVE-2023-39611
CVE.ORG link : CVE-2023-39611
JSON object : View
Products Affected
softwarefx
- chart_fx
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')