CVE-2023-48394

Summary

CVE-2023-48394 is a vulnerability affecting Kaifa Technology's WebITR online attendance system. The system's file uploading function lacks proper file type validation, enabling a remote user with regular privileges to upload arbitrary files. This vulnerability could be exploited to execute arbitrary commands or disrupt services, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.