CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2023/11/27 12:00 a.m.•5 views

CVE-2023-29770: Unrestricted Upload of File with Dangerous Type

In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering...

8.8CVSS7.8AI score0.00906EPSS

SaveExploits1References2

Mend•added 2023/11/27 12:00 a.m.•4 views

CVE-2023-29770

In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering...

8.8CVSS0.00906EPSS

SaveExploits1References2

Rows per page

Family

Bulletin Type

Min CVSS Score

Date

Order by