Security Advisory

CVE-2023-28465

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-12 00:00:00

Last updated 2025-05-27 14:31:25

Assigner mitre

State PUBLISHED

Description

The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to certain directories via directory traversal, if an allowed directory name is a substring of the directory name chosen by the attacker. NOTE: this issue exists because of an incomplete fix for CVE-2023-24057.

← Browse all CVEs View on cve.org ↗