{ "schema_version": "1.4.0", "id": "GHSA-vfqw-vpr8-pmjg", "modified": "2024-04-04T07:20:55Z", "published": "2023-08-31T18:30:28Z", "aliases": [ "CVE-2023-41717" ], "details": "Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41717" }, { "type": "WEB", "url": "https://github.com/federella/CVE-2023-41717" } ], "database_specific": { "cwe_ids": [ "CWE-552" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-08-31T16:15:10Z" } }