CVE-2023-1501

A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2023-1501

Impact summary (CVE-2023-1501) RockOA 2.3.2 contains a vulnerability in the runAction function of the file acloudCosAction.php.SQL. Manipulating the fileid argument enables unrestricted file upload, with remote-initiated exploitation reported. Multiple sources reference this issue, including Red ...

CVE-2023-1501 RockOA acloudCosAction.php.SQL runAction unrestricted upload

A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclos...