CVE-2023-46237

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, an endpoint intended to offer limited enumeration abilities to authenticated users was accessible to unauthenticated users. This enabled unauthenticated users to discover files and their respective paths that were visible to the Apache user group. Version 1.5.10 contains a patch for this issue.

• CWE-22

• https://github.com/FOGProject/fogproject/commit/68d73740d7d40aee77cfda3fb8199d58bf04f48bPatch
• https://github.com/FOGProject/fogproject/security/advisories/GHSA-ffp9-rhfm-98c2Vendor Advisory
• https://github.com/FOGProject/fogproject/commit/68d73740d7d40aee77cfda3fb8199d58bf04f48bPatch
• https://github.com/FOGProject/fogproject/security/advisories/GHSA-ffp9-rhfm-98c2Vendor Advisory

Published

Oct 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-46231In Splunk Add-on Builder versions below 4.1.4, the applicati…7.2
• CVE-2023-46232era-compiler-vyper is the EraVM Vyper compiler for zkSync Er…5.3
• CVE-2023-46233crypto-js is a JavaScript library of crypto standards. Prior…9.1
• CVE-2023-46234browserify-sign is a package to duplicate the functionality …7.5
• CVE-2023-46235FOG is a free open-source cloning/imaging/rescue suite/inven…6.1
• CVE-2023-46236FOG is a free open-source cloning/imaging/rescue suite/inven…7.5
• CVE-2023-46238ZITADEL is an identity infrastructure management system. ZIT…5.4
• CVE-2023-46239quic-go is an implementation of the QUIC protocol in Go. Sta…7.5
• CVE-2023-4624Server-Side Request Forgery (SSRF) in GitHub repository book…2.4
• CVE-2023-46240CodeIgniter is a PHP full-stack web framework. Prior to Code…7.5
• CVE-2023-46241`discourse-microsoft-auth` is a plugin that enables authenti…8.1
• CVE-2023-46242XWiki Platform is a generic wiki platform offering runtime s…8.8