CVE-2023-37152

Katalog CVE

CVSS 9.8 · Critical EPSS 2,0%

Kerentanan Unrestricted Upload of File with Dangerous Type pada online art gallery project online art gallery. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. Note: This has been disputed as not a valid vulnerability.

Rincian

Terbit di NVD

10 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 80,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Trinity-SYT-SECURITY/arbitrary-file-upload-RCE/blob/main/Online%20Art%20gallery%20project%2... exploit · advisory pihak ketiga
• https://www.exploit-db.com/exploits/51524 exploit · advisory pihak ketiga · vdb entry
• https://www.chtsecurity.com/news/ad3cee07-3e35-45c0-97f9-811cce13dda9
• https://www.chtsecurity.com/news/afe25fb4-55ac-45d9-9ece-cbc1edda2fb2%20