## https://sploitus.com/exploit?id=727B5B23-117E-5D3D-9214-FD4B3E589E0A
# cve-2023-47246-poc
CVE-2023-47246 is a path traversal vulnerability in SysAid On-Premise software (prior to version 23.3.36). Attackers can exploit this vulnerability to write files to the webroot directory of Tomcat, thereby executing arbitrary code on the server. **Vulnerability Details:**
This vulnerability stems from SysAid’s lack of proper validation when processing user-input paths, creating an opportunity for path traversal attacks. Attackers can construct specific paths to upload malicious files to critical server directories, such as Tomcat’s webroot directory. Once the files are uploaded, attackers can execute arbitrary code by accessing those files, thereby gaining full control over the affected server. **Impact:**
By exploiting CVE-2023-47246, attackers can:
- **Execute arbitrary code:** Run malicious scripts or programs on the server, potentially leading to data leaks, service interruptions, or further attacks.
- **Deploy malware:** Install ransomware (such as Clop) or other malware, causing data encryption, extortion, or other destructive actions.
- **Expose sensitive information:** Access or steal sensitive data stored on the server, such as user credentials and personal information. Given the severity of this vulnerability, it is strongly recommended that users of SysAid On-Premise immediately update their software to version 23.3.36 or higher to prevent potential attacks.