Privilege escalation

2023-09-1421:15:00

PRIOn knowledge base

www.prio-n.com

privilege escalation

arbitrary file upload

remote attacker

command execution

sensitive information

teller web app v.4.4.0

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.5%

JSON

An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file.

CPENameOperatorVersion
tellereq4.4.0

CPE	Name	Operator	Version
	teller	eq	4.4.0

References

github.com/Mr-n0b3dy/CVE-2023-42362