What’s Vulnerable › Vulnerabilities

CVE-2023-24517: Remote Code Execution via Unrestricted File Upload

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-08-22 · updated 2026-06-17
• Weakness: CWE-434

Description

Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms.

Affected products

• Artica PFMS Pandora FMS: through 767

References

• https://gist.github.com/Argonx21/9ab62f6e5d8bc6d39b8a338426af121e
• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
• https://gist.github.com/Argonx21/9ab62f6e5d8bc6d39b8a338426af121e
• https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Get alerted when CVE-2023-24517 or the next vulnerability affects your stack