CVE-2023-0003: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.

Affected products

• Fedoraproject Fedora: version 37 only; version 38 only; version 39 only
• Palo Alto Networks Cortex Xsoar: from 6.10.0, before 6.10.0.185964 (fixed in 6.10.0.185964); version 6.6.0 only; version 6.8.0 only; version 6.9.0 only

Published 2023-02-08. Last modified 2026-06-17.