Security Advisory
CVE-2023-23328
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file.