CVE-2023-34833: Malicious File Upload
Published Jun 15, 2023
·Updated
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file.
Affected Software
2 affected components
ThinkAdmin ThinkAdmin=6.0
Ctolog Thinkadmin=6.0
Event History
Jun 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this arbitrary file upload vulnerability in ThinkAdmin v6?
The vulnerability ID for this arbitrary file upload vulnerability in ThinkAdmin v6 is CVE-2023-34833.
2
What is the severity level of CVE-2023-34833?
The severity level of CVE-2023-34833 is medium with a CVSS score of 6.1.
3
How does the arbitrary file upload vulnerability in ThinkAdmin v6 occur?
The arbitrary file upload vulnerability in ThinkAdmin v6 occurs in the component /api/upload.php, allowing attackers to execute arbitrary code via a crafted file.
4
Who is affected by the arbitrary file upload vulnerability in ThinkAdmin v6?
ThinkAdmin v6 with a version of 6.0 is affected by the arbitrary file upload vulnerability.
5
Is there a fix available for CVE-2023-34833?
Yes, updating ThinkAdmin to a version that fixes the vulnerability is the recommended fix for CVE-2023-34833.