CVE-2023-26949

2023-03-0600:00:00

mitre

www.cve.org

arbitrary file upload

onekeyadmin v1.3.9

php file

execute arbitrary code

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

65.2%

JSON

An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file.

References

github.com/keheying/onekeyadmin/issues/1