CVE-2023-27881 A user could use the “Upload Resource” functionality to upload files to any location on the disk

Description

A user could use the “Upload Resource” functionality to upload files to any location on the disk.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Vuforia Studio 9.9	premières → < 9.9	9.9

Autres CVE de Vuforia Studio

Les 6 CVE de Vuforia Studio →

CVE-2023-31200 PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site… 5.7 Moyenne CVE-2023-29502 Before importing a project into Vuforia, a user could modify the “resourceDirectory” attribute in the appConfig.json… 6.2 Moyenne CVE-2023-29152 By changing the filename parameter in the request, an attacker could delete any file with the permissions of the… 6.2 Moyenne CVE-2023-24476 An attacker with local access to the machine could record the traffic, which could allow them to resend requests… 1.8 Faible