---
cve: "CVE-2023-41793"
severity: "MEDIUM"
cvss: 6.7
epss: "39%"
vendor: "Pandora FMS"
kev: false
exploited: false
published: "2024-03-19 17:15:08"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-17T16:03:07+02:00"
---

# CVE-2023-41793

> 6.7 MEDIUM

## Beschreibung

: Path Traversal vulnerability in Pandora FMS on all allows Path Traversal. This vulnerability allowed changing directories and creating files and downloading them outside the allowed directories. This issue affects Pandora FMS: from 700 through

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Hoch | good |
| PR Privilegien | Gering | warn |
| UI Interaktion | Erforderlich | good |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Gering | warn |

## Referenzen

- <https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2023-41793) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_