CVE-2023-42180

2023-09-1400:00:00

mitre

github.com

arbitrary file upload

lenosp

html code execution

AI Score

7.3

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted JPG file.

References

gitee.com/zzdevelop/lenosp/issues/I7X760