CVE-2023-2924

Summary: CVE-2023-2924 affects Supcon SimField up to version 1.80.00.00. The issue is in the endpoint /admin/reportupload.aspx where manipulating the parameter files[] enables unrestricted uploads, allowing a remote attacker to potentially upload arbitrary files. Multiple sources (NVD, Red Hat, C...