Directory Traversal vulnerability in fuwushe.org iFair versions 23.8_ad0 and before allows an attacker to obtain sensitive information via a crafted script.
References
| Link | Resource |
|---|---|
| https://github.com/THMOAS0/SSR123/blob/main/%E4%BC%81%E8%AF%ADiFair%20Any%20file%20read.pdf | Exploit Third Party Advisory |
| https://www.yuque.com/ssr123/gxhh8t/xv5oxd5i5pxmxd1a?singleDoc | Exploit Third Party Advisory |
| https://github.com/THMOAS0/SSR123/blob/main/%E4%BC%81%E8%AF%ADiFair%20Any%20file%20read.pdf | Exploit Third Party Advisory |
| https://www.yuque.com/ssr123/gxhh8t/xv5oxd5i5pxmxd1a?singleDoc | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 08:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/THMOAS0/SSR123/blob/main/%E4%BC%81%E8%AF%ADiFair%20Any%20file%20read.pdf - Exploit, Third Party Advisory | |
| References | () https://www.yuque.com/ssr123/gxhh8t/xv5oxd5i5pxmxd1a?singleDoc - Exploit, Third Party Advisory |
10 Jan 2024, 19:44
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-22 | |
| CPE | cpe:2.3:a:fuwushe:ifair:*:*:*:*:*:*:*:* | |
| References | () https://github.com/THMOAS0/SSR123/blob/main/%E4%BC%81%E8%AF%ADiFair%20Any%20file%20read.pdf - Exploit, Third Party Advisory | |
| References | () https://www.yuque.com/ssr123/gxhh8t/xv5oxd5i5pxmxd1a?singleDoc - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Fuwushe ifair
Fuwushe |
03 Jan 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-03 07:15
Updated : 2024-11-21 08:30
NVD link : CVE-2023-47473
Mitre link : CVE-2023-47473
CVE.ORG link : CVE-2023-47473
JSON object : View
Products Affected
fuwushe
- ifair
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')