CVE-2023-47251 Path traversal in n/a
Authenticated attackers can exploit a directory traversal in the VNC print function to transfer malicious PDFs to client filesystems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-47251?
CVE-2023-47251 is a medium-severity path traversal vulnerability in n/a, published on 22 Nov 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem.
Weakness: CWE-22
Which versions are affected by CVE-2023-47251?
It affects 2 products.
Products include M-Privacy Mprivacy-Tools, M-Privacy Tightgatevnc.
How do I fix CVE-2023-47251?
No fix has been published for CVE-2023-47251 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-47251 being exploited?
There is no known exploitation of CVE-2023-47251 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-g9w6-7925-3rmm.