Description
Ivanti Avalanche存在任意文件上传漏洞，此漏洞是由于FileStoreConfig.jsf接口对用户的请求验证不当导致的。
Ivanti Avalanche CVE-2023-46263 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2023-46263
https://www.thezdi.com/blog/2024/2/5/cve-2023-46263-ivanti-avalanche-arbitrary-file-upload-vulnerability
https://www.ivanti.com/blog/new-ivanti-avalanche-vulnerabilities
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=34527
https://cve.imfht.com/detail/CVE-2023-46263
https://www.tenable.com/plugins/nessus/190368
https://www.syxsense.com/wp-content/uploads/syxsense-securityarticles/miscellaneous/syx-1014-13881.html?agt=index
https://hub.ivanti.com/s/article/Avalanche-6-4-2-Security-Hardening-and-CVEs-addressed
https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11