Today > | 1 Medium vulnerabilities - You can now download lists of IOCs here!

CVE-2023-46694

May 28, 2024, 8:16 p.m.

Product(s) Impacted

Vtenext

21.02

Description

Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote commands. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckeditor file manager functionality.

Weaknesses

Date

Published: May 28, 2024, 8:16 p.m.

Last Modified: May 28, 2024, 8:16 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://github.com/ cve@mitre.org