exploitDog

CVE-2023-40980

Опубликовано: 01 сент. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.

Ссылки

https://github.com/wkeyuan/DWSurvey/issues/107
Exploit
Issue Tracking
Third Party Advisory
https://github.com/wkeyuan/DWSurvey/issues/107
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:diaowen:dwsurvey:*:*:*:*:*:*:*:*

Версия до 3.2.0 (включая)

EPSS

Процентиль: 79%

0.01289

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-c939-7674-w47x

CVSS3: 9.8

github

больше 2 лет назад

File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.

EPSS

Процентиль: 79%

0.01289

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434