Vulnerabilities > Percona > Monitoring AND Management > 2.2.1

DATE CVE VULNERABILITY TITLE RISK
2023-06-06 CVE-2023-34409 Path Traversal vulnerability in Percona Monitoring and Management 2.2.0/2.2.1
In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does not properly formalize and sanitize URL paths to reject path traversal attempts.
network
low complexity
percona CWE-22
critical
9.8