CVE-2023-46865

/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an…

published October 30, 2023

CVSS
—
EPSS
20%
Percentile
97.5
In the wild
Unconfirmed
What it is

/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20321 · 97.5th percentile
Published
2023-10-30T00:00Z
EPSS history
Timeline
  • 30 OCT 00:00Z
    /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an…
    cvelistv5