Beveiligingsadvies

CVE-2023-4122

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-07 23:10:04

Laatst bijgewerkt 2025-05-28 13:51:13

Toegewezen door Fluid Attacks

CVSS-score 9.9

Status PUBLISHED

Beschrijving

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.

← Alle CVE's bekijken Bekijk op cve.org ↗