Brocade Fabric Operating System Firmware vulnerabilities

2 known vulnerabilities in Brocade Fabric Operating System Firmware from Broadcom. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  https://github.com/curl/curl: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-27534Mar 30, 2023Https://github.com/curl/curlEPSS 2.44%

  A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to

• 9.0 Critical severity

  Apache HTTP Server-Side Request Forgery (SSRF) Exploited

  CVE-2021-40438Sep 16, 2021ApacheEPSS 100%

  A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.