CVE-2023-26469 - In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server

CRITICAL

In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server

Published Aug 17, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 82.95%

In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
http://packetstormsecurity.com/files/174248/Jorani-Remote-Code-Execution.html		ExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-30288		Advisory
https://github.com/Orange-Cyberdefense/CVE-repository/tree/master		Exploit
https://jorani.org/security-features-in-lms.html		Product

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 17, 2023

Updated Oct 8, 2024

Reserved Feb 23, 2023

CISA Vulnrichment

Updated Oct 8, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 17, 2023

Updated Oct 8, 2024

GitHub

No data