CVE-2023-29635

2023-05-0100:00:00

mitre

www.cve.org

file upload

remote attackers

malicious code

function coversupload

security vulnerability

antabot white-jotter v0.2.2

AI Score

9.9

Confidence

High

EPSS

0.003

Percentile

71.6%

JSON

File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload.

References

github.com/Antabot/White-Jotter/blob/c1c5d66fda090b986b8f46a7132d403e3b038c5d/wj/src/main/java/com/gm/wj/controller/LibraryController.java#L63

github.com/Antabot/White-Jotter/issues/157