Description

FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.

Remediation

References

https://github.com/frangoteam/FUXA

https://github.com/MateusTesser/CVE-2023-31718

https://youtu.be/VCQkEGntN04

Related Vulnerabilities

CVE-2018-8017 Vulnerability in maven package org.apache.tika:tika-parsers

CVE-2017-7681 Vulnerability in maven package org.apache.openmeetings:openmeetings-server

CVE-2018-17145 Vulnerability in npm package bcoin

CVE-2023-24057 Vulnerability in maven package ca.uhn.hapi.fhir:org.hl7.fhir.r5

CVE-2022-25892 Vulnerability in npm package muhammara

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Product Third Party Advisory Exploit NVD-CWE-Other