CVE-2023-37289

CRITIQUE 9.8CVE-2023-37289 · Published 20/07/2023 · updated 17/06/2026

En bref

CVE-2023-37289 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant document on-line submission and approval system (infodoc).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.93%, plus élevée que 60.7% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
document on-line submission and approval system infodoc	`= 22547= 22567`	No fix yet

Description

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service. This issue affects Document On-line Submission and Approval System: 22547, 22567.

References

twcert.org.tw/tw/cp-132-7225-cef32-1.html · Third Party Advisory

Autres vulnérabilités de document on-line submission and approval system

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free