Security Advisory

CVE-2023-34855

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-06-12 00:00:00
Last updated 2025-01-03 23:28:50
Assigner mitre
State PUBLISHED

Description

A Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi.