Junglewise Threat Intelligence

CVE-2023-49006: Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability

CVE-2023-49006 · Severity: low · CVSS 3.1 · Published 2023-12-19

Technologies: phpsysinfo/phpsysinfo (Packagist). Vendors: Packagist.

Executive brief

Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability

Affected products

Packagist phpsysinfo/phpsysinfo

Related threats

phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSI_ALLOWED access-control check in read_confi
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence