CVE-2023-4171
Medium
Description
A vulnerability classified as problematic was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This vulnerability affects unknown code of the file \Service\FileDownload.ashx. The manipulation of the argument Files leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-236206 is the identifier assigned to this vulnerability.
SeverityMedium
CVSS4.3
Exploit probability—
ProductCdwanjiang Flash Flood Disaster Monitoring And Warning System
PublishedAug 5, 2023
First seenAug 5, 2023
Weakness typeCWE-24CWE-24
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cdwanjiang flash_flood_disaster_monitoring_and_warning_system | 2.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.