An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remove code execution.
History

Wed, 09 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2023-08-10T19:04:43.054Z

Updated: 2024-10-09T19:33:58.502Z

Reserved: 2023-05-10T01:00:12.524Z

Link: CVE-2023-32564

cve-icon Vulnrichment

Updated: 2024-08-02T15:18:37.616Z

cve-icon NVD

Status : Modified

Published: 2023-08-10T20:15:10.503

Modified: 2024-11-21T08:03:36.653

Link: CVE-2023-32564

cve-icon Redhat

No data.