CVE-2023-3796

Summary

CVE-2023-3796: A vulnerability has been identified in Bug Finder Foody Friend 1.0's Profile Picture Handler component. This issue, classified as problematic, allows for unrestricted uploads by manipulating the argument "profile_picture" in the /user/profile file. The attack can be executed remotely. Vendor notification was made but no response was received. (VDB-235064)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.