An insecure file upload flaw exists in older releases because uploaded files are not properly validated. This can be abused to host malicious content, including phishing pages, and also gives rise to a cross‑site scripting vulnerability. The root weakness is a file type validation flaw, categorized as CWE‑434. The potential victims may be authenticated users of the platform; credential compromise or social‑engineering attacks are inferred from the possibility of phishing.

The vulnerability affects the dfir-iris iris-web application in all versions prior to 2.4.28. The specified product is a web‑based collaborative platform used by incident responders.

The CVSS score of 6.3 indicates moderate severity. The EPSS score is not available and the issue is not listed in CISA’s KEV catalog. The likely attack vector is through the web upload interface; an attacker only needs the ability to submit a file, so the exploitation is straightforward once access is gained.