CVE-2015-3203

HIGH 7.5CVE-2015-3203 · Published 28/09/2015 · updated 17/06/2026

In short

CVE-2015-3203 is a HIGH (CVSS 7.5) vulnerability affecting h5ai (h5ai project).
Chance of exploitation in the next 30 days (EPSS): 9.4%, higher than 95.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
h5ai h5ai_project	`≤ 0.24.1`	No fix yet

Description

Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the href parameter.

References

larsjung.de/h5ai/cve-2015-3203.txt · Vendor Advisory
exploit-db.com/exploits/38256 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free