Lucene search

K
osvGoogleOSV:CVE-2023-43838
HistoryOct 04, 2023 - 4:15 p.m.

CVE-2023-43838

2023-10-0416:15:10
Google
osv.dev
2
arbitrary file upload
personal management system
svg file
user profile
code execution
software

AI Score

8

Confidence

High

EPSS

0.001

Percentile

30.8%

An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile’s avatar.

AI Score

8

Confidence

High

EPSS

0.001

Percentile

30.8%

Related for OSV:CVE-2023-43838