CVE-2023-53871

CRITICAL

9.8

Beschreibung

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/15/2025

Zuletzt geandert12/30/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

soosyze:soosyze

Schwachen (CWE)

CWE-434

Referenzen

https://github.com/soosyze/soosyze(disclosure@vulncheck.com)

https://soosyze.com/(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/51718(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/soosyze-unrestricted-file-upload-via-broken-upload-logic(disclosure@vulncheck.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.