Skip to content
Sign in
9.8 Critical

CVE-2023-2712 Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for…

Description

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: before 23.05.15.

Affected products and versions

Product Affected versions Fixed in
Rental Module 23.05 earliest → < 23.05.15 23.05.15

Other CVEs of Rental Module

The 2 CVEs of Rental Module →
CVE-2023-2713 Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for… 9.8 Critical
Track this CVE