Critical · 9.8 CVE-2023-3049 EUVD-2023-43741GHSA-88gf-qqgm-77w7

File Upload in TMT's Lockcell

Published Jun 13, 2023 · Updated May 22, 2026 · Assigned by TR-CERT

Vendor: TMT Product: Lockcell

Description

Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection.

This issue affects Lockcell: before 15.

Affected products

Vendor	Product	Affected	Fixed
TMT	Lockcell	< 15	15

References

https://www.usom.gov.tr/bildirim/tr-23-0345 government-resource broken-link
https://fordefence.com/cve-2023-3049-unrestricted-upload-of-file-with-dangerous-type-vulnerability-allows-command-injection/ exploit technical-description
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0345 government-resource