Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2023-35189

Iagona ScrutisWeb Unrestricted Upload of File with Dangerous Type

Description

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remote code execution vulnerability that could allow an unauthenticated user to upload a malicious payload and execute it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

iagona ScrutisWeb

Default version status: unaffected

  • 0 to ≤ 2.1.37affected

References