{"id":"CVE-2023-6102","state":"PUBLISHED","title":"Maiwei Safety Production Control Platform unrestricted upload","description":"A vulnerability, which was classified as problematic, was found in Maiwei Safety Production Control Platform 4.1. Affected is an unknown function of the file /Content/Plugins/uploader/FileChoose.html?fileUrl=/Upload/File/Pics/&parent. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-245064. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2023-11-13T17:31:05.080Z","updatedAt":"2025-01-08T21:26:46.689Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","source":"VulDB"},"assigner":"VulDB","products":["Maiwei Safety Production Control Platform"],"affected":[{"vendor":"Maiwei","product":"Safety Production Control Platform","versions":[{"version":"4.1","status":"affected"}]}],"references":["https://vuldb.com/?id.245064","https://vuldb.com/?ctiid.245064"],"weaknesses":["CWE-434"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/6xxx/CVE-2023-6102.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-6102","state":"PUBLISHED","datePublished":"2023-11-13T17:31:05.080Z","dateUpdated":"2025-01-08T21:26:46.689Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2023-11-13T10:18:46.183Z"},"containers":{"cna":{"title":"Maiwei Safety Production Control Platform unrestricted upload","descriptions":[{"lang":"en","value":"A vulnerability, which was classified as problematic, was found in Maiwei Safety Production Control Platform 4.1. Affected is an unknown function of the file /Content/Plugins/uploader/FileChoose.html?fileUrl=/Upload/File/Pics/&parent. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-245064. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"de","value":"Es wurde eine Schwachstelle in Maiwei Safety Production Control Platform 4.1 gefunden. Sie wurde als problematisch eingestuft. Betroffen hiervon ist ein unbekannter Ablauf der Datei /Content/Plugins/uploader/FileChoose.html?fileUrl=/Upload/File/Pics/&parent. Mittels Manipulieren mit unbekannten Daten kann eine unrestricted upload-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"Maiwei","product":"Safety Production Control Platform","versions":[{"version":"4.1","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.245064","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.245064","tags":["signature","permissions-required"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-434","type":"CWE","lang":"en","description":"CWE-434 Unrestricted Upload"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2023-11-13T17:31:05.080Z"},"timeline":[{"time":"2023-11-13T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2023-11-13T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2023-11-13T11:24:05.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"weal (VulDB User)","type":"analyst"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.245064","tags":["vdb-entry","x_transferred"]},{"url":"https://vuldb.com/?ctiid.245064","tags":["signature","permissions-required","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T08:21:17.403Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-08T21:26:06.679752Z","id":"CVE-2023-6102","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-08T21:26:46.689Z"}}]}}}