CVE-2023-5790

A vulnerability classified as critical was found in SourceCodester File Manager App 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-file.php. The manipulation of the argument uploadedFileName leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243595.
Configurations

Configuration 1 (hide)

cpe:2.3:a:remyandrade:file_manager_app:1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 08:42

Type Values Removed Values Added
CVSS v2 : 6.5
v3 : 9.8
v2 : 6.5
v3 : 6.3
References () https://github.com/Yp1oneer/cve_hub/blob/main/File%20Manager%20App/Unrestricted%20File%20Upload.pdf - Exploit, Third Party Advisory () https://github.com/Yp1oneer/cve_hub/blob/main/File%20Manager%20App/Unrestricted%20File%20Upload.pdf - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.243595 - Third Party Advisory () https://vuldb.com/?ctiid.243595 - Third Party Advisory
References () https://vuldb.com/?id.243595 - Third Party Advisory () https://vuldb.com/?id.243595 - Third Party Advisory

29 Feb 2024, 01:42

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-26 17:15

Updated : 2024-11-21 08:42


NVD link : CVE-2023-5790

Mitre link : CVE-2023-5790

CVE.ORG link : CVE-2023-5790


JSON object : View

Products Affected

remyandrade

  • file_manager_app
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type