CVE-2023-42227

CVE-2023-42227 is a directory traversal vulnerability affecting Pat Infinite Solutions HelpdeskAdvanced in versions up to and including 11.0.33. The flaw exists in the WSCView/Save function, which allows attackers to manipulate file paths and access files outside the intended directory. It has a CVSS v3.1 base score of 7.5, rated as High severity, with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating network accessibility, low attack complexity, no required privileges or user interaction, and high impact on confidentiality.

Unauthenticated attackers can exploit this vulnerability remotely over the network by sending crafted requests to the WSCView/Save endpoint. Successful exploitation enables reading arbitrary files on the server, potentially exposing sensitive information such as configuration files, user data, or system details, without affecting integrity or availability.

Further details are available in the reference at https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md. No specific patch or mitigation guidance is detailed in the provided information.