Skip to content
OpenAdvisories
Critical · 10.0 CVE-2023-6723 EUVD-2023-58937GHSA-qhj9-jqq3-357q

Unrestricted Upload of File with Dangerous Type in Repox

Published Dec 13, 2023 · Updated May 22, 2025 · Assigned by INCIBE

Description

An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.

Affected products

VendorProductAffectedFixed
Repox Repox ≤ 2.3.7 —

References