Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-42335
HistorySep 20, 2023 - 12:00 a.m.

CVE-2023-42335

2023-09-2000:00:00
mitre
github.com
file upload
fl3xx dispatch
fl3xx crew
remote code execution
new expense

AI Score

7.9

Confidence

Low

EPSS

0.002

Percentile

65.0%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

total

Unrestricted File Upload vulnerability in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a remote attacker to execute arbitrary code via the add attachment function in the New Expense component.

AI Score

7.9

Confidence

Low

EPSS

0.002

Percentile

65.0%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-42335