Lucene search
HistoryApr 14, 2023 - 2:15 a.m.
CVE-2023-29621
cve-2023-29621
purchase order management
arbitrary file upload
arbitrary code execution
crafted file upload
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
54.9%
Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server.
Affected configurations
Node
purchase_order_management_projectpurchase_order_managementMatch1.0
Related
cve
cve
CVE-2023-29621
2023-04-14 02:15:12
prion
prion
Privilege escalation
2023-04-14 02:15:00
cvelist
cvelist
CVE-2023-29621
2023-04-14 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
54.9%
Related for NVD:CVE-2023-29621