CVE-2023-2712 — Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

CVE-2023-2712

Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform. PUBLISHED

Description (CNA)

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: before 23.05.15.

Affected (CNA)

Vendor / product	Versions
Unknown / Rental Module	affected 0 before 23.05.15

CWE

CWE-434

References

https://www.usom.gov.tr/bildirim/tr-23-0276
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0276

ADP enrichment

CVE

No English description supplied.

https://www.usom.gov.tr/bildirim/tr-23-0276

CISA-ADP

No English description supplied.

No references supplied.