OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/en/cp-139-7190-d73c1-2.html | Third Party Advisory |
| https://www.twcert.org.tw/en/cp-139-7190-d73c1-2.html | Third Party Advisory |
Configurations
History
21 Nov 2024, 08:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.twcert.org.tw/en/cp-139-7190-d73c1-2.html - Third Party Advisory |
30 Jun 2023, 16:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://www.twcert.org.tw/en/cp-139-7190-d73c1-2.html - Third Party Advisory | |
| CPE | cpe:2.3:a:itpison:omicard_edm:-:*:*:*:*:*:*:* | |
| First Time |
Itpison omicard Edm
Itpison |
16 Jun 2023, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service. |
16 Jun 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-16 04:15
Updated : 2024-11-21 08:03
NVD link : CVE-2023-32753
Mitre link : CVE-2023-32753
CVE.ORG link : CVE-2023-32753
JSON object : View
Products Affected
itpison
- omicard_edm
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type