In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.
CISA Catalog
Date Added
Due Date
Vulnerability Name
Required Action
2023-11-13
2023-12-04
SysAid Server Path Traversal Vulnerability
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Date Added: 2023-11-13
Due Date: 2023-12-04
Vulnerability Name: SysAid Server Path Traversal Vulnerability
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.