CVE-2023-40980: Malicious File Upload
Published Sep 1, 2023
·Updated
File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.
Affected Software
1 affected component
Diaowen Dwsurvey<=3.2.0
Event History
Sep 1, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this file upload vulnerability?
The vulnerability ID for this file upload vulnerability is CVE-2023-40980.
2
What is the severity of CVE-2023-40980?
The severity of CVE-2023-40980 is critical with a CVSS score of 9.8.
3
What is the affected software version?
The affected software version is DWSurvey-OSS v.3.2.0 and earlier.
4
How can a remote attacker exploit CVE-2023-40980?
A remote attacker can exploit CVE-2023-40980 by executing arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.
5
Is there a fix available for CVE-2023-40980?
Yes, a fix is available for CVE-2023-40980. Please refer to the official reference for more details.