CVE-2023-41474

Published January 25th, 2024

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Directory Traversal vulnerability in Ivanti Avalanche 6.3.4.153 allows a remote authenticated attacker to obtain sensitive information via the javax.faces.resource component.

JBalanza/CVE-2023-41474

Public disclosure of Ivanti's Avalanche Path Traversal vulnerability

GitHub