VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 10, 2023· Updated Jun 17, 2026

CVE-2023-32564

CVE-2023-32564

Description

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remove code execution.

Affected products

4
  • Ivanti/Avalanche3 versions
    cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*range: <6.4.1
    • (no CPE)range: <=6.4.1
    • (no CPE)range: 6.4.1
  • Avalanche/Avalanchellm-fuzzy
    Range: <=6.4.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.