Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-4097

Multiple vulnerabilities in IDM Sistemas QSige

Description

The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IDM Sistemas QSige QSige

Default version status: unaffected

  • 3.0.0.0affected

References