Skip to content
OpenAdvisories
High · 7.2 CVE-2023-39377 EUVD-2023-43102GHSA-m7m7-9gfg-6cxv

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method

Published Sep 26, 2023 · Updated Sep 24, 2024 · Assigned by INCD

Vendor: SiberianCMS Product: SiberianCMS

Description

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method

Affected products

VendorProductAffectedFixed
SiberianCMS SiberianCMS versions 4.*, 5.* – ≤ upgrade to version 4.20.44 or 5.0.4 —

References