CVE-2023-51924: Malicious File Upload

Published Jan 20, 2024

Updated

An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file.

Affected Software

1 affected component

Yonyou YonBIP=3_23.05

Event History

Jan 20, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-51924?

CVE-2023-51924 has a high severity rating due to its potential for allowing attackers to execute arbitrary code.

How do I fix CVE-2023-51924?

To fix CVE-2023-51924, you should upgrade to the latest version of YonBIP beyond v3_23.05 that addresses this vulnerability.

What does CVE-2023-51924 affect?

CVE-2023-51924 affects the YonBIP v3_23.05 software specifically in the uap.framework.rc.itf.IResourceManager interface.

Who is vulnerable to CVE-2023-51924?

Organizations using YonBIP v3_23.05 are vulnerable to CVE-2023-51924 and should take immediate action to safeguard their systems.

Can CVE-2023-51924 be exploited remotely?

Yes, CVE-2023-51924 can be exploited remotely by an attacker through the upload of malicious files.