CVE-2023-41266

MediumCVSS 6.5/10Known exploited (CISA KEV)Last modified Aug 5, 2026

Description

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous session. This allows them to transmit HTTP requests to unauthorized endpoints. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Aug 29, 2023
Last modified
Aug 5, 2026
Added to CISA KEV
Dec 7, 2023
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-412677.8In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As thiCVE-2023-412689.8Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects EscCVE-2023-41275.9Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.CVE-2023-412704.3Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-1033.2 and before alCVE-2023-412737.2A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerabiliCVE-2023-412744.9A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerabilityCVE-2023-412757.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-412767.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-412777.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-412787.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-412797.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-412807.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,
CVE-2023-41266: Medium severity, CVSS 6.5 | Vulnix