Security Advisory

CVE-2023-23607

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-01-20 20:03:45
Last updated 2025-03-10 21:21:19
Assigner GitHub_M
State PUBLISHED

Description

erohtar/Dasherr is a dashboard for self-hosted services. In affected versions unrestricted file upload allows any unauthenticated user to execute arbitrary code on the server. The file /www/include/filesave.php allows for any file to uploaded to anywhere. If an attacker uploads a php file they can execute code on the server. This issue has been addressed in version 1.05.00. Users are advised to upgrade. There are no known workarounds for this issue.