Unrated severityNVD Advisory· Published Oct 12, 2023· Updated Sep 18, 2024

CVE-2023-41261

Description

An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV does not require authentication and allows an unauthenticated user to export a report and access the results.

Affected products

Plixer/Scrutinizerdescription
SonicWall/Scrutinizerllm-fuzzy
Range: <19.3.1

Patches

Vulnerability mechanics

References

github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0001.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000