CVE-2023-4122: Student Information System v1.0 - Insecure File Upload

Published Dec 7, 2023

Updated

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.

Affected Software

1 affected component

Imsurajghosh Student Information System=1.0

Event History

Dec 7, 2023

CVE Published

11:10 PM

Data Sourced

11:10 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-4122?

CVE-2023-4122 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2023-4122?

To mitigate CVE-2023-4122, ensure that file uploads are properly validated and restricted to certain file types and sizes.

Who is affected by CVE-2023-4122?

CVE-2023-4122 affects versions of the Student Information System up to version 1.0.

What does CVE-2023-4122 exploit?

CVE-2023-4122 exploits an insecure file upload vulnerability in the 'photo' parameter of the my-profile page.

Can CVE-2023-4122 lead to data breaches?

Yes, CVE-2023-4122 can potentially allow attackers to execute arbitrary code, leading to data breaches.