CVE-2023-48376

CVE-2023-48376 affects SmartStar Software CWS (a web-based integration platform). The flaw lies in the file upload function, which does not restrict dangerous file types, enabling an unauthenticated remote attacker to upload arbitrary files to execute commands or disrupt service. The CVSS vector ...

CVE-2023-48375

CVE-2023-48375 concerns SmartStar Software CWS, a web-based integration platform. The entry describes a broken access control issue: an authenticated user with normal privileges can obtain administrator privileges and perform arbitrary system operations or disrupt services. Affected component is ...

CVE-2023-48374

The CVE-2023-48374 entry pertains to SmartStar Software CWS, a web-based integration platform. The vulnerability is described as using a hard-coded credential for a specific low-privilege account, enabling an unauthenticated remote attacker to run partial processes and view partial information. T...