CWE-552
Files or Directories Accessible to External Parties
Description
The product makes files or directories accessible to unauthorized actors, even though they should not be.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-150 · CAPEC-639
CVEs mapped to this weakness (493)
page 8 of 25| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-2052 | Hig | 0.49 | 7.5 | 0.01 | Mar 18, 2024 | CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated files and logs exfiltration and download of files when an attacker modifies the URL to download to a different location. | ||
| CVE-2024-24161 | Hig | 0.49 | 7.5 | 0.01 | Feb 2, 2024 | MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not filtered. | ||
| CVE-2023-4550 | Hig | 0.49 | 7.5 | 0.00 | Jan 29, 2024 | Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on… | ||
| CVE-2023-6266 | Hig | 0.49 | 7.5 | 0.02 | Jan 11, 2024 | The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMI_BACKUP case of the handle_downloading function in all versions up to, and including, 1.3.6. This makes it possible for unauthenticated… | ||
| CVE-2023-26580 | Hig | 0.49 | 7.5 | 0.01 | Oct 25, 2023 | Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers. | ||
| CVE-2023-33517 | Hig | 0.49 | 7.5 | 0.01 | Oct 23, 2023 | carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System). | ||
| CVE-2023-43856 | Hig | 0.49 | 7.5 | 0.01 | Sep 27, 2023 | Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateController.java. | ||
| CVE-2023-4475 | Hig | 0.49 | 7.5 | 0.00 | Aug 22, 2023 | An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and… | ||
| CVE-2023-38952 | Hig | 0.49 | 7.5 | 0.03 | Aug 3, 2023 | Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type of user accessing the application by default. Privilege restrictions between non-admin and admin… | ||
| CVE-2023-34645 | Hig | 0.49 | 7.5 | 0.01 | Jun 16, 2023 | jfinal CMS 5.1.0 has an arbitrary file read vulnerability. | ||
| CVE-2022-45450 | Hig | 0.49 | 7.5 | 0.00 | May 18, 2023 | Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984. | ||
| CVE-2023-27180 | Hig | 0.49 | 7.5 | 0.01 | Apr 7, 2023 | GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/backup.php. | ||
| CVE-2023-28375 | Hig | 0.49 | 7.5 | 0.02 | Mar 28, 2023 | Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information. | ||
| CVE-2023-25260 | Hig | 0.49 | 7.5 | 0.01 | Mar 28, 2023 | Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion. | ||
| CVE-2023-23330 | Hig | 0.49 | 7.5 | 0.01 | Mar 28, 2023 | amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion. | ||
| CVE-2023-1246 | Hig | 0.49 | 7.5 | 0.01 | Mar 10, 2023 | Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations. This issue affects Starcities: through 1.3. | ||
| CVE-2023-26948 | Hig | 0.49 | 7.5 | 0.01 | Mar 9, 2023 | onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download. | ||
| CVE-2023-26956 | Hig | 0.49 | 7.5 | 0.01 | Mar 8, 2023 | onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code. | ||
| CVE-2023-22974 | Hig | 0.49 | 7.5 | 0.02 | Feb 22, 2023 | A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server. | ||
| CVE-2022-44343 | Hig | 0.49 | 7.5 | 0.01 | Feb 6, 2023 | CRMEB 4.4.4 is vulnerable to Any File download. |
- risk 0.49cvss 7.5epss 0.01
CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated files and logs exfiltration and download of files when an attacker modifies the URL to download to a different location.
- risk 0.49cvss 7.5epss 0.01
MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not filtered.
- risk 0.49cvss 7.5epss 0.00
Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on…
- risk 0.49cvss 7.5epss 0.02
The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMI_BACKUP case of the handle_downloading function in all versions up to, and including, 1.3.6. This makes it possible for unauthenticated…
- risk 0.49cvss 7.5epss 0.01
Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers.
- risk 0.49cvss 7.5epss 0.01
carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System).
- risk 0.49cvss 7.5epss 0.01
Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateController.java.
- risk 0.49cvss 7.5epss 0.00
An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and…
- risk 0.49cvss 7.5epss 0.03
Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type of user accessing the application by default. Privilege restrictions between non-admin and admin…
- risk 0.49cvss 7.5epss 0.01
jfinal CMS 5.1.0 has an arbitrary file read vulnerability.
- risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984.
- risk 0.49cvss 7.5epss 0.01
GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/backup.php.
- risk 0.49cvss 7.5epss 0.02
Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information.
- risk 0.49cvss 7.5epss 0.01
Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.
- risk 0.49cvss 7.5epss 0.01
amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion.
- risk 0.49cvss 7.5epss 0.01
Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations. This issue affects Starcities: through 1.3.
- risk 0.49cvss 7.5epss 0.01
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.
- risk 0.49cvss 7.5epss 0.01
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.
- risk 0.49cvss 7.5epss 0.02
A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server.
- risk 0.49cvss 7.5epss 0.01
CRMEB 4.4.4 is vulnerable to Any File download.