CVE-2023-30804 — Sangfor Next-Gen Application Firewall Authenticated File Disclosure
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitr…
Published: 2023-10-10 · CVSS: 6.9 · CVSS 4.0
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpn_html/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated attacker when paired with CVE-2023-30803.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7