CVE-2023-31941
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Aug 17, 2023
Updated: Aug 18, 2023
CWE ID 434
Summary
CVE-2023-31941 is a file upload vulnerability affecting Online Travel Agency System version 1.0. An attacker can exploit this weakness by uploading a malicious PHP file to the employee_insert.php, which then allows for the execution of arbitrary code remotely. This vulnerability poses a significant risk to the security of the system, as it can lead to unauthorized access, data theft, or system compromise. It is crucial for system administrators to apply the necessary patches or upgrades as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share