CVE-2023-24517

7.2 highEPSS 1.0%

High (7.2) in pandorafms pandora fms. EPSS 1.0% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-08-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pandorafms:pandora_fms

References

https://gist.github.com/Argonx21/9ab62f6e5d8bc6d39b8a338426af121e
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
https://gist.github.com/Argonx21/9ab62f6e5d8bc6d39b8a338426af121e
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

Check your stack JSON