CVE-2023-41717

MediumCVSS 5.5

Published: 31/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

Versions 3.6.1.25 and prior of Zscaler Proxy have inappropriate file type control, allowing local attackers to bypass file download/upload restrictions.

Risk Assessment

Attackers can exploit this vulnerability to upload or download unauthorized files, potentially leading to data leakage or malware within the organization.

Recommendation

It is recommended to update Zscaler Proxy to the latest version to mitigate this vulnerability and implement additional file access control measures.

Original NVD description (English source)

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions.