CVE-2023-21417

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder deletion. This flaw can only be exploited after authenticating with an operator- or administrator- privileged service account. The impact of exploiting this vulnerability is lower with operator service accounts and limited to non-system files compared to administrator-privileges. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

• CWE-35
• CWE-22

• https://www.axis.com/dam/public/2a/82/12/cve-2023-21417-en-US-417791.pdfVendor Advisory
• https://www.axis.com/dam/public/2a/82/12/cve-2023-21417-en-US-417791.pdfVendor Advisory

Published

Nov 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-21411User provided input is not sanitized in the “Settings > Acce…8.8
• CVE-2023-21412User provided input is not sanitized on the AXIS License Pla…8.8
• CVE-2023-21413GoSecure on behalf of Genetec Inc. has found a flaw that all…7.2
• CVE-2023-21414NCC Group has found a flaw during the annual internal penetr…6.8
• CVE-2023-21415Sandro Poppi, member of the AXIS OS Bug Bounty Program, has …8.1
• CVE-2023-21416Sandro Poppi, member of the AXIS OS Bug Bounty Program, has …6.5
• CVE-2023-21418Sandro Poppi, member of the AXIS OS Bug Bounty Program, has …7.1
• CVE-2023-21419An improper implementation logic in Secure Folder prior to S…7.5
• CVE-2023-2142In Nunjucks versions prior to version 3.2.4, it was possibl…6.1
• CVE-2023-21420Use of Externally-Controlled Format String vulnerabilities i…7.8
• CVE-2023-21421Improper Handling of Insufficient Permissions or Privileges …7.8
• CVE-2023-21422Improper authorization vulnerability in semAddPublicDnsAddr …5.5