Beveiligingsadvies

CVE-2023-24610

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-02-01 00:00:00

Laatst bijgewerkt 2025-03-27 14:15:49

Toegewezen door mitre

CVSS-score 8.8

Status PUBLISHED

Beschrijving

NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The client-side checks can be bypassed. This may allow attackers to steal Protected Health Information because the product is for health charting.

← Alle CVE's bekijken Bekijk op cve.org ↗