CVE-2023-40051 (published 2024-01-18T15:11:04.080Z)
This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to a server directory path on the system running PASOE.  If the upload contains a payload that can further exploit the server or its network, the launch of a larger scale attack may be possible.




Affected products: Vendor: Progress Software Corporation
Product: OpenEdge
Versions: 11.7.0, 12.2.0, Innovation Releases