CVE-2023-27507

Name of the Vulnerable Software and Affected Versions MicroEngine Mailform versions 1.1.0 through 1.1.8

Description The issue allows a remote attacker to save an arbitrary file on the server and execute it, given that the file upload function and server save option are enabled. This is due to a path traversal vulnerability.

Recommendations For versions 1.1.0 through 1.1.8, consider disabling the file upload function and server save option as a temporary workaround until a patch is available. Restrict access to the server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.