CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-08-29
Qlik Sense Enterprise for Windows Path Traversal and Anonymous Session Generation Vulnerability (CVE-2023-41266) Security Advisory
[Affected Scope] Qlik Sense Enterprise for Windows (May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier)
[Impact] An unauthenticated remote attacker can exploit a path traversal vulnerability to generate an anonymous session and transmit unauthorized HTTP requests to internal endpoints
[Mitigation] Immediately upgrade to the official patched versions (August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, or August 2022 Patch 13 and later)