CVE-2023-7036

Summary

CVE-2023-7036 is a recently disclosed vulnerability affecting Automad up to version 1.10.9. This issue, classified as problematic, resides in the FileCollectionController.php component's Content Type Handler function named 'upload'. An attacker can exploit this vulnerability to perform unrestricted file uploads. The attack can be initiated remotely, making it a significant threat. The exploit for this vulnerability has been made public, increasing the risk for potential attacks. The Vulnerability Database (VDB) has assigned the identifier VDB-248685 to this issue. Despite early disclosure, the vendor has not responded to address the vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.