ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-7590-55002-1.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-7590-55002-1.html | Third Party Advisory |
Configurations
History
21 Nov 2024, 08:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.twcert.org.tw/tw/cp-132-7590-55002-1.html - Third Party Advisory |
22 Dec 2023, 17:00
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-434 | |
| First Time |
Itpison omicard Edm
Itpison |
|
| CPE | cpe:2.3:a:itpison:omicard_edm:6.0.1.5:*:*:*:*:*:*:* | |
| References | () https://www.twcert.org.tw/tw/cp-132-7590-55002-1.html - Third Party Advisory |
15 Dec 2023, 13:42
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-15 04:15
Updated : 2024-11-21 08:31
NVD link : CVE-2023-48371
Mitre link : CVE-2023-48371
CVE.ORG link : CVE-2023-48371
JSON object : View
Products Affected
itpison
- omicard_edm
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type