CVE-2023-1501: RockOA acloudCosAction.php.SQL runAction unrestricted upload
Published Mar 19, 2023
·Updated
A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223401 was assigned to this vulnerability.
Affected Software
1 affected component
Rockoa RockOA=2.3.2
Event History
Mar 19, 2023
CVE Published
08:00 PM
Data Sourced
08:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-1501?
CVE-2023-1501 is classified as a critical vulnerability.
2
How do I fix CVE-2023-1501?
To fix CVE-2023-1501, update RockOA to the latest patched version following the guidelines provided by the vendor.
3
What type of vulnerability is CVE-2023-1501?
CVE-2023-1501 is an unrestricted file upload vulnerability.
4
Can CVE-2023-1501 be exploited remotely?
Yes, CVE-2023-1501 can be exploited remotely by an attacker.
5
Which version of RockOA is affected by CVE-2023-1501?
CVE-2023-1501 affects RockOA version 2.3.2.