Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-2712

Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TR-CERT

Description

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server. This issue affects Rental Module: before 23.05.15.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Rental Module

Default version status: unknown

  • 0 to < 23.05.15affected

References