CVE-2024-25693 — Portal for ArcGIS has a directory traversal vulnerability.
There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation may allow a remote, authenticated attacker to traverse the file system to access f…
Published: 2024-04-04 · CVSS: 9.9 · CVSS 3.1
There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation may allow a remote, authenticated attacker to traverse the file system to access files or execute code outside of the intended directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7