CVE-2023-50692
File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to the downlo...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to the download_url parameter in the app/admin/exts/ directory.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com