Beveiligingsadvies

CVE-2023-6142

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-20 23:24:48

Laatst bijgewerkt 2025-05-19 13:54:39

Toegewezen door Fluid Attacks

CVSS-score 5.4

Status PUBLISHED

Beschrijving

Dev blog v1.0 allows to exploit an XSS through an unrestricted file upload, together with a bad entropy of filenames. With this an attacker can upload a malicious HTML file, then guess the filename of the uploaded file and send it to a potential victim.

← Alle CVE's bekijken Bekijk op cve.org ↗