CVE-2024-3778CWE-434

Ai3 QbiBot - Unrestricted File Upload

High · published April 15, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-04-15T03:41Z
EPSS history
Timeline
  • 15 APR 03:41Z
    Ai3 QbiBot - Unrestricted File Upload
    cvelistv5