CVE-2023-28128CWE-434

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove…

High · published May 9, 2023

Patch now

High probability of exploitation

CVSS calls it high at 7.2. It sits in the 99.7th percentile for exploit probability.

CVSS v3.1

7.2

EPSS

85%

Percentile

99.7

In the wild

Unconfirmed

What it is

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove code execution.

The record

Technical detail

CVSS v3.1: 7.2 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.84697 · 99.7th percentile
Weakness: CWE-434 · Unrestricted Upload of File with Dangerous Type
Published: 2023-05-09T00:00Z

EPSS history

Timeline

09 MAY 00:00Z
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove…
cvelistv5