CVEvulnerability

CVE-2023-4475

5.5 MEDIUM Published 2023-08-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-552

Description

An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

Affected configurations

• asustor data master (>= 4.0.6.ris1 < 4.2.2.ri61)

Related

Weakness · CWE (1)

  • CWE-552 Files or Directories Accessible to External Parties weakness

References