CVE-2023-0265 Vulnerability Details

  /     /     /  

CVE-2023-0265 Metadata Quick Info

CVE Published: 04/04/2023 | CVE Updated: 02/08/2024 | CVE Year: 2023
Source: Fluid Attacks | Vendor: n/a | Product: Uvdesk
Status : PUBLISHED

---

CVE-2023-0265 Description

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Insecure file upload
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).