Skip to content
OpenAdvisories
High · 8.1 CVE-2023-3032 EUVD-2023-43724GHSA-95gq-vgg7-x3mr

Mobatime web application - Arbitrary file upload (RCE)

Published Jun 2, 2023 · Updated Jan 8, 2025 · Assigned by NCSC.ch

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application (Documentary proof upload modules) allows a malicious user to Upload a Web Shell to a Web Server.This issue affects Mobatime web application: through 06.7.22.

Affected products

VendorProductAffectedFixed
Mobatime Mobatime web application ≤ 06.7.22 —

References