Beveiligingsadvies

CVE-2023-48394

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-15 09:25:18
Laatst bijgewerkt 2024-08-02 21:30:34
Toegewezen door twcert
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.