Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-39377

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method

Description

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SiberianCMS SiberianCMS

Default version status: unaffected

  • versions 4.*, 5.* to ≤ upgrade to version 4.20.44 or 5.0.4affected

References