Known Exploited Vulnerabilities December 07, 2023 · CISA KEV Catalog

CVE-2023-41266: Qlik Sense Path Traversal Vulnerability

Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow the attacker to send further requests to unauthorized endpoints.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2023-41266Qlik

Related

CVE-2023-48365: Qlik Sense HTTP Tunneling Vulnerability Known Exploited Vulnerabilities · Jan 13, 2025

CVE-2023-41265: Qlik Sense HTTP Tunneling Vulnerability Known Exploited Vulnerabilities · Dec 07, 2023

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026