CWE-552: Files or Directories Accessible to External Parties, page 7
Filter
The product makes files or directories accessible to unauthorized actors, even though they should not be.
What the weakness is: CWE-552 at MITRE
Ask an AI about CWE-552
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-552: Files or Directories Accessible to External Parties and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/552.html and https://cve.bz/cve/cwe/552?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 4.9CVE-2023-4588EPSS 0.3%
File accessibility vulnerability in Delinea Secret Server, in its v10.9.000002 and v11.4.000002 versions. Exploitation of this vulnerability could allow an authenticated user with administrative privileges to create a backup file in the ap…
- 4.8CVE-2023-4743EPSS 0.6%
A vulnerability was found in Dreamer CMS up to 4.1.3. It has been classified as problematic. Affected is an unknown function of the file /upload/ueditorConfig?action=config. The manipulation leads to files or directories accessible. It is …
- 5.5CVE-2023-41717EPSS 0.4%
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions.
- 5.5CVE-2023-4475EPSS 0.2%
An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 …
- 7.5CVE-2023-38952ExploitEPSS 2.7%
Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type of user accessing the application by default. Privilege res…
- 7.2CVE-2023-38948EPSS 1.0%
An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin.
- 6.5CVE-2023-37551EPSS 0.5%
In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to download files with any file extensions to the controller. I…
- 6.5CVE-2023-32226EPSS 0.5%
Sysaid - CWE-552: Files or Directories Accessible to External Parties - Authenticated users may exfiltrate files from the server via an unspecified method.
- 7.5CVE-2023-29450EPSS 1.3%
JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data.
- 7.5CVE-2023-34316EPSS 0.6%
An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.
- 4.2CVE-2023-2538EPSS 0.2%
A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00 allows an unauthenticated remote attacker to retrieve the private key of the TLS certificate in use by the BMC via forc…
- 5.3CVE-2023-34834ExploitEPSS 4.0%
A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" endpoint.
- 7.8CVE-2023-36664EPSS 3.9%
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
- 3.3CVE-2022-42834EPSS 0.2%
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13, macOS Big Sur 11.7.3. An app may be able to access mail folder attachments through a temporary directory used …
- 9.8CVE-2023-29931EPSS 0.9%
laravel-s 3.7.35 is vulnerable to Local File Inclusion via /src/Illuminate/Laravel.php.
- 7.5CVE-2023-34645EPSS 0.8%
jfinal CMS 5.1.0 has an arbitrary file read vulnerability.
- 7.1CVE-2023-2976EPSS 0.2%
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the defau…
- 7.5CVE-2023-33568ExploitEPSS 15%
An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists.
- 2.5CVE-2023-32684EPSS 0.3%
Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to version 0.16.0, a virtual machine instance with a malicious disk image could read a single file on the host filesystem, even when no filesystem is m…
- 9.1CVE-2023-31066EPSS 1.4%
Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Different users in InLong could delete, edit, stop, and start others'…
- 7.5CVE-2023-31064EPSS 1.2%
Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. the user in InLong could cancel an application that doesn't belongs t…
- 7.5CVE-2022-45450EPSS 0.4%
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 3…
- 4.3CVE-2023-20184EPSS 0.5%
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted conta…
- 4.3CVE-2023-20183EPSS 0.5%
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted conta…
- 7.5CVE-2023-2766ExploitEPSS 54%
A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini. The manipulation leads to files or directories …
- 5.5CVE-2023-29820EPSS 0.2%
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulner…
- 5.3CVE-2023-29107EPSS 0.6%
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint discloses some undocumented files. This could allow an una…
- 7.5CVE-2023-27180EPSS 1.1%
GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/backup.php.
- 7.2CVE-2023-1124EPSS 1.1%
The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks.
- 7.5CVE-2023-28375EPSS 1.5%
Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information.
- 7.5CVE-2023-25260EPSS 0.8%
Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.
- 7.5CVE-2023-23330EPSS 0.8%
amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion.
- 7.5CVE-2023-1246EPSS 0.6%
Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations. This issue affects Starcities: through 1.3.
- 7.5CVE-2023-26948EPSS 0.6%
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.
- 7.5CVE-2023-26956EPSS 0.7%
onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.
- 5.3CVE-2023-22858EPSS 0.4%
An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs.
- 7.5CVE-2023-22974EPSS 1.9%
A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server.
- 8.8CVE-2023-0822EPSS 0.6%
The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality.
- 7.5CVE-2022-44343EPSS 0.6%
CRMEB 4.4.4 is vulnerable to Any File download.
- 4.9CVE-2022-48094EPSS 0.7%
lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php.
- 7.5CVE-2022-48161EPSS 0.8%
Easy Images v2.0 was discovered to contain an arbitrary file download vulnerability via the component /application/down.php. This vulnerability is exploited via a crafted GET request.
- 6.5CVE-2022-47950EPSS 1.0%
An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting …
- 7.8CVE-2022-23508EPSS 0.3%
Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulnerability in GitOps run could allow a local user or process to alter a Kubernetes cluster's…
- 6.5CVE-2022-45052EPSS 0.8%
A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.type.php endpoint, external users are capable of accessing files on the server.
- 6.5CVE-2022-4236EPSS 0.9%
The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscr…
- 6.5CVE-2022-45426EPSS 0.6%
Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of ordinary users, by sending a specific crafted packet to the vulnerable interface, an attacker can download arbitrary fil…
- 6.5CVE-2022-28283EPSS 0.6%
The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox < 99.
- 7.5CVE-2022-4106EPSS 0.9%
The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from …
- 7.5CVE-2022-45227EPSS 0.8%
The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication.
- 7.5CVE-2022-44356ExploitEPSS 2.9%
WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data and log files.