Lucene search

K
cvelistMitreCVELIST:CVE-2023-29770
HistoryNov 27, 2023 - 12:00 a.m.

CVE-2023-29770

2023-11-2700:00:00
mitre
www.cve.org
sentrifugo 3.5
assetscontroller
upload security

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering.

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

Related for CVELIST:CVE-2023-29770