CVE-2023-6723 — Unrestricted Upload of File with Dangerous Type in Repox

CVE-2023-6723

Unrestricted Upload of File with Dangerous Type in Repox PUBLISHED

Description (CNA)

An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.

Affected (CNA)

Vendor / product	Versions
Repox / Repox	affected 0 through 2.3.7

CWE

CWE-434

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox

ADP enrichment

CVE

No English description supplied.

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox

CISA-ADP

No English description supplied.

No references supplied.