CVE-2023-47313

Summary

CVE-2023-47313: Headwind MDM Web panel 5.22.1 contains a Directory Traversal vulnerability. During the file upload process, an API call is used to move temporary files to the file directory without validation. Attackers can manipulate this call by providing arbitrary file paths, leading to unauthorized files being moved and subsequently downloaded.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.