Skip to content
Sign in
8.8 High

CVE-2023-0265 Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server

Description

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers.

Affected products and versions

Product Affected versions Fixed in
Uvdesk 1.1.1 No fix stated

Other CVEs of Uvdesk

The 2 CVEs of Uvdesk →
CVE-2023-0325 Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application 6.1 Medium
Track this CVE