CVE-2023-29152

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-285

Affected software

No affected versions have been published.

Timeline

Published
Jun 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-291534.9Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentiCVE-2023-291547.2SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product witCVE-2023-291559.8Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This CVE-2023-291566.8DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. AnCVE-2023-291577.8Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalatioCVE-2023-291589.1SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or CVE-2023-291597.5Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to vieCVE-2023-29165.3The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the CVE-2023-291607.8Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive infoCVE-2023-291617.8Uncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalatiCVE-2023-291626.0Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R) oneAPI Toolkits before version 2022.3.1 maCVE-2023-291637.5When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to t
CVE-2023-29152: High severity, CVSS 8.1 | Vulnix