CVE-2023-23328

2023-03-1000:00:00

mitre

www.cve.org

file upload

avantfax

php file type validation

vulnerability

specially crafted

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

36.4%

JSON

A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file.

References

avantfax.com

github.com/superkojiman/vulnerabilities/blob/master/AvantFAX-3.3.7/README.md