Critical severity · published Jan 18, 2024
CVE-2023-40051
Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal
9.9
CVSS
0.6%
EPSS
No
On KEV
Description
This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to a server directory path on the system running PASOE. If the upload contains a payload that can further exploit the server or its network, the launch of a larger scale attack may be possible.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
OpenEdge · Progress Software Corporation
11.7.0 before 11.7.18; 12.2.0 before 12.2.13; Innovation Releases before 12.8.0 · source: vendor, NVD
OI
Openedge Innovation · Progress
before 12.8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-40051
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-40051
Vendor Advisory
https://community.progress.com/s/article/Important-Progress-OpenEdge-Critical-Alert-for-Progress-Application-Server-in-OpenEdge-PASOE-Arbitrary-File-Upload-Vulnerability-in-WEB-Transport
Product
https://www.progress.com/openedge
More from OpenEdge
9.1
CVE-2025-8095
Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge
8.4
CVE-2025-7388
Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface
8.2
CVE-2025-7389
Unauthorized Arbitrary File Read via RMI in AdminServer Interface
7.5
CVE-2023-40052
Progress Application Server (PAS) for OpenEdge Denial of Service