Description
Zoho ManageEngine OpManager UploadMib存在目录遍历漏洞。此漏洞是由于uploadMib接口对接收的文件缺乏校验导致的。
Zoho ManageEngine OpManager UploadMib 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-47211
https://www.manageengine.com/itom/advisory/cve-2023-47211.html
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1851
https://www.tenable.com/plugins/nessus/187974
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47211.yaml
https://access.redhat.com/security/cve/cve-2023-47211
https://www.nsfocus.net/vulndb/92336
https://avd.aliyun.com/product?prod=manageengine_opmanager