PT-2023-26040
CVE-2023-37602
·
تاريخ النشر
2023-07-20
·
تاريخ التحديث
2023-07-31
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Alkacon OpenCMS version 15.0
Description
The issue allows attackers to execute arbitrary code via uploading a crafted PNG file, specifically exploiting an arbitrary file upload vulnerability in the component /workplace#!explorer.
Recommendations
For Alkacon OpenCMS version 15.0, consider restricting access to the /workplace#!explorer component until a fix is available, and avoid uploading unverified files to prevent potential code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾