Description
ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| ITPison | OMICARD EDM 's SMS | unaffected |
|
No data.
No data available yet.
Remediation
Vendor Solution
Update version to v5.9
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-52423 | ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service. |
References
| Link | Providers |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-7590-55002-1.html |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: twcert
Published:
Updated: 2024-08-02T21:30:35.296Z
Reserved: 2023-11-16T03:49:45.970Z
Link: CVE-2023-48371
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-12-15T04:15:06.900
Modified: 2024-11-21T08:31:35.190
Link: CVE-2023-48371
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses