CVE-2023-34845: Malicious File Upload
Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-34845?
CVE-2023-34845 is an arbitrary file upload vulnerability in Bludit v3.14.1 that allows attackers to execute arbitrary web scripts or HTML by uploading a crafted SVG file.
How severe is CVE-2023-34845?
CVE-2023-34845 has a severity rating of medium, with a severity value of 5.4.
How can I fix CVE-2023-34845?
To fix CVE-2023-34845, update Bludit to a version that addresses the vulnerability, or apply any available patches or workarounds provided by the vendor.
Which software versions are affected by CVE-2023-34845?
CVE-2023-34845 affects Bludit version 3.14.1.
Where can I find more information about CVE-2023-34845?
More information about CVE-2023-34845 can be found at the following reference: https://github.com/bludit/bludit/issues/1508