CVE-2023-6976CWE-434

Unrestricted Upload of File with Dangerous Type

High · published December 20, 2023

CVSS v3.0
8.8
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01016 · 63.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2023-12-20T05:30Z
EPSS history
Timeline
  • 20 DEC 05:30Z
    Unrestricted Upload of File with Dangerous Type
    cvelistv5