CVE-2023-29625

Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code…

High · published April 14, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00955 · 61.0th percentile
Published
2023-04-14T00:00Z
EPSS history
Timeline
  • 14 APR 00:00Z
    Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code…
    cvelistv5