CVE-2023-5812

🗓️ 27 Oct 2023 01:31:05Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

Vulnerability in flusity CMS allows unrestricted file uploa

Reporter	Title	Published	Views	Family All 10
CNNVD	flusity CMS 安全漏洞	27 Oct 202300:00	–	cnnvd
CNVD	flusity CMS Arbitrary File Upload Vulnerability	31 Oct 202300:00	–	cnvd
Cvelist	CVE-2023-5812 flusity CMS upload.php handleFileUpload unrestricted upload	27 Oct 202301:31	–	cvelist
EUVD	EUVD-2023-58095	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5812	27 Oct 202302:15	–	nvd
OSV	CVE-2023-5812	27 Oct 202302:15	–	osv
Prion	Out-of-bounds	27 Oct 202302:15	–	prion
Positive Technologies	PT-2023-32346 · Unknown · Flusity-Cms	27 Oct 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-5812	23 May 202504:33	–	redhatcve
Vulnrichment	CVE-2023-5812 flusity CMS upload.php handleFileUpload unrestricted upload	27 Oct 202301:31	–	vulnrichment

NVD

Node

flusity flusityRange≤2.304

[
  {
    "vendor": "flusity",
    "product": "CMS",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/flusity/flusity-CMS/issues/4
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
uploaded_file	request body	core/tools/upload.php	Unrestricted file upload via handleFileUpload in core/tools/upload.php by manipulating the uploaded_file argument.	CWE-434

17 Jun 2026 06:49Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.14.7 - 8.8

CVSS 25.8

CVSS 34.7

EPSS0.00692

SSVC

CWE-434