CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Vulnrichment•added 2023/04/14 12:0 a.m.•6 views

CVE-2023-2034 Unrestricted Upload of File with Dangerous Type in froxlor/froxlor

Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14...

9.1CVSS8.7AI score0.73247EPSS

Exploits1References2

CVE•added 2023/04/14 12:0 a.m.•64 views

CVE-2023-2034

Froxlor/Froxlor versions prior to 2.0.14 are affected by an unrestricted upload of files with dangerous types. The root cause is inadequate validation of uploaded image/dangerous-type files, which could enable remote code execution via path manipulation. Impact is high (possible RCE) as described...

9.1CVSS8.7AI score0.73247EPSS

Exploits1References2Affected Software1