CVE-2023-5796

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Oct 26, 2023
Updated: May 17, 2024
CWE ID 434

Summary

CVE-2023-5796 is a critical vulnerability affecting the CodeAstro POS System 1.0. This issue impacts an unspecified functionality within the /setting file of the Logo Handler component. The flaw enables attackers to conduct unrestricted file uploads, potentially leading to serious security consequences. The exploit can be executed remotely, and the vulnerability details have been made public, increasing the risk of successful attacks. VDB-243602 is the assigned identifier for this issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share