{"id":"CVE-2023-47251","aliases":["EUVD-2023-51382","GHSA-g9w6-7925-3rmm"],"status":"published","title":"In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the...","description":"In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0173,"percentile":0.77752,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2023-11-22T00:00:00Z","modified":"2026-06-17T06:32:28Z","products":[{"vendor":"m-privacy","product":"mprivacy-tools"},{"vendor":"m-privacy","product":"tightgatevnc"}],"references":[{"url":"https://sec-consult.com/en/vulnerability-lab/advisories/index.html","tags":["x_transferred","Third Party Advisory"]},{"url":"https://www.m-privacy.de/en/tightgate-pro-safe-surfing/","tags":["x_transferred","Product"]},{"url":"https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-m-privacy-tightgate-pro/","tags":["x_transferred","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2023/Nov/13","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47251"},{"url":"https://github.com/advisories/GHSA-g9w6-7925-3rmm"}],"sources":{"cve":[{"id":"CVE-2023-47251","description":"In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem.","status":"published","published":"2023-11-22T00:00:00Z","modified":"2024-08-02T21:09:35.925Z","updated_at":"2026-11-02T14:35:14.298866Z"}],"euvd":[{"id":"EUVD-2023-51382","description":"In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem.","status":"published","published":"2023-11-22T00:00:00Z","modified":"2024-08-02T21:09:35Z","updated_at":"2026-11-03T03:49:57.829961Z"}],"ghsa":[{"id":"GHSA-g9w6-7925-3rmm","title":"In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the...","description":"In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem.","status":"published","published":"2023-11-22T18:30:57Z","modified":"2023-12-09T05:04:37Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:55:10.314842Z"}],"nvd":[{"id":"CVE-2023-47251","description":"In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem.","status":"published","published":"2023-11-22T18:15:08.93Z","modified":"2026-06-17T06:32:28.223Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:08:49.393375Z"}]}}