CVE-2023-27397 — MicroEngine Inc. / MicroEngine Mailform

Description (CNA)

Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.

Affected (CNA)

Vendor / product	Versions
MicroEngine Inc. / MicroEngine Mailform	affected version 1.1.0 to 1.1.8

CWE

No CWE identifiers supplied.

References

https://microengine.jp/information/security_2023_05.html
https://jvn.jp/en/jp/JVN31701509/

ADP enrichment

CVE

No English description supplied.

https://microengine.jp/information/security_2023_05.html
https://jvn.jp/en/jp/JVN31701509/

CISA-ADP

No English description supplied.

No references supplied.