CVE-2023-3802

Summary

CVE-2023-3802 is a newly disclosed vulnerability affecting the Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This issue, rated as problematic, impacts an unspecified functionality of the file /Controller/Ajaxfileupload.ashx. Manipulation of the argument file allows for unrestricted uploads, making the system susceptible to potential attacks. The exploit for this vulnerability has been made public, increasing the risk for potential exploitation. VDB-235070 is the assigned identifier for this vulnerability. Unfortunately, the vendor was unresponsive when contacted regarding this disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.