CVE-2023-41830

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorization.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-36

Affected software

VendorProductVersions
MotorolaPhones< 2023-12-01
motorolafirmware< 20231201

References

Timeline

Published
May 3, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-418337.5A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege viaCVE-2023-418346.1Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers CVE-2023-418357.5When a Multipart request is performed but some of the fields exceed the maxStringLength  limit, the upload files will remain in struts.multiCVE-2023-418366.1An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0, FortiSCVE-2023-418387.1An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 CVE-2023-41849.8A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown procCVE-2023-418407.8A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a maliciousCVE-2023-418418.8An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin CVE-2023-418426.7A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute unauCVE-2023-418435.4A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through CVE-2023-418445.4A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through CVE-2023-418467.8A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All
CVE-2023-41830: Medium severity, CVSS 6.5 | Vulnix