← CVE Intelligence

CVE-2023-48376

SmartStar Software CWS Web-Base - Arbitrary File Upload PUBLISHED

Description (CNA)

SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

Affected (CNA)

Vendor / productVersions
SmartStar Software / CWS Web-Baseaffected v10.25

CWE

CWE-434

References

ADP enrichment

CVE

No English description supplied.