CVE-2023-50692: Malicious File Upload
Published Dec 28, 2023
·Updated
File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to the downloadurl parameter in the app/admin/exts/ directory.
Affected Software
1 affected component
Jizhicms JIZHICMS=2.5
Event History
Dec 28, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-50692?
CVE-2023-50692 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2023-50692?
To fix CVE-2023-50692, upgrade JIZHICMS to a version higher than 2.5 that addresses this vulnerability.
3
What type of vulnerability is CVE-2023-50692?
CVE-2023-50692 is a file upload vulnerability that allows unauthorized remote code execution.
4
Who is affected by CVE-2023-50692?
Users of JIZHICMS version 2.5 are specifically affected by CVE-2023-50692.
5
What causes CVE-2023-50692?
CVE-2023-50692 is caused by the improper handling of file uploads in the app/admin/exts/ directory.