CVE-2023-27170
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter. This may enable access to files outside the intended directory.
Risk Assessment
An attacker may read or modify unauthorized files on the server, potentially leading to data leakage or further system compromise. However, this requires the ability to modify the siteName parameter.
Recommendation
Update Xpand IT Write-back manager to a version later than 2.3.1 if available, and implement validation of the siteName parameter to prevent directory traversal. Until patched, restrict access to the application.
Other vulnerabilities in Xpand IT Write-back manager
See all- CVE-2023-27168Critical
An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted JSP file. An attacker can upload a malicious file that gets executed on the server.
- CVE-2023-27172Critical
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key via a brute-force attack, enabling token forgery and unauthorized access.
- CVE-2023-27169Medium
Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in the license class configuration, leading to the generation of hardcoded and predictable symmetric encryption keys for license generation and validation. This allows an attacker to reconstruct the keys and forge licenses.
Original NVD description (English source)
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter.