← CVE Intelligence

CVE-2023-4097

Multiple vulnerabilities in IDM Sistemas QSige PUBLISHED

Description (CNA)

The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username.

Affected (CNA)

Vendor / productVersions
IDM Sistemas QSige / QSigeaffected 3.0.0.0

CWE

CWE-434

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.