CVE-2023-39346 bjrjk/LinuxASMCallGraph before commit 20dba06 allows attackers to cause a RCE on the server side via uploading a crafted ZIP file due to incorrect filtering rules of uploaded file

LinuxASMCallGraph is software for drawing the call graph of the programming code. Linux ASMCallGraph before commit 20dba06bd1a3cf260612d4f21547c25002121cd5 allows attackers to cause a remote code execution on the server side via uploading a crafted ZIP file due to incorrect filtering rules of...

CVE-2023-39346

CVE-2023-39346 — LinuxASMCallGraph suffers a remote code execution via uploading a crafted ZIP file caused by incorrect filtering of uploaded files. Affected: LinuxASMCallGraph before commit 20dba06bd1a3cf260612d4f21547c25002121cd5. Impact: server-side RCE; integrity, confidentiality, and availab...