CVE-2023-24720

2023-04-0520:15:07

Google

osv.dev

arbitrary file upload

readium-js

v0.32.0

attackers

execute

epub file

software

vulnerability

arbitrary code

8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.0%

JSON

An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file.

CPENameOperatorVersion
readium-jseq0.23.0
readium-jseq0.32.0
readium-jseq0.27.0
readium-jseq0.19
readium-jseq0.22.2
readium-jseq0.24.0
readium-jseq0.26.0
readium-jseq0.22.1
readium-jseq0.22.3
readium-jseq0.17

Name	Operator	Version
readium-js	eq	0.23.0
readium-js	eq	0.32.0
readium-js	eq	0.27.0
readium-js	eq	0.19
readium-js	eq	0.22.2
readium-js	eq	0.24.0
readium-js	eq	0.26.0
readium-js	eq	0.22.1
readium-js	eq	0.22.3
readium-js	eq	0.17