Skip to content
OpenAdvisories
High · 8.8 CVE-2023-23314 EUVD-2023-27414GHSA-7884-ggpr-27rj

An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted…

Published Jan 23, 2023 · Updated Apr 2, 2025 · Assigned by mitre

Description

An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file.

References