CVE-2023-40980

File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file...

CVE-2023-40980

creationtimestamp| type| source ---|---|--- 2023-09-01 20:15:18+00:00| seen| https://t.me/cibsecurity/69667...

CVE-2023-40980

CVE-2023-40980 affects DWSurvey-OSS up to v3.2.0. The vulnerability resides in UploadAction.java, with methods saveimage and savveFile, enabling a remote attacker to upload malicious files and execute arbitrary code. Reported as a remote-code execution flaw; no official patch version is detailed ...

CVE-2023-40980

File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file...