Lucene search
PRIOn knowledge basePRION:CVE-2023-3797HistoryJul 20, 2023 - 10:15 p.m.
Design/Logic Flaw
2023-07-2022:15:00
PRIOn knowledge base
www.prio-n.com
7
gen technology
mountain torrent
disaster prevention
monitoring system
early warning
vulnerability
unrestricted upload
filedata
exploit
public disclosure
vdb-235065
nvd
vendor non-response
A vulnerability, which was classified as critical, was found in Gen Technology Four Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System up to 20230712. This affects an unknown part of the file /Duty/AjaxHandle/UploadFloodPlanFileUpdate.ashx. The manipulation of the argument Filedata leads to unrestricted upload. The exploit has been disclosed to the public and may be used. The identifier VDB-235065 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
