National Cyber Warfare Foundation (NCWF)

National Cyber Warfare Foundation (NCWF) Forums

CVE-2023-46865

0 user ratings

2023-10-30 05:10:33
milo
CVEs
- archive --

/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.

CVE-2023-46865
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46865
/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.
2023-10-30T01:15:21Z

Source: CVEAnnouncements
Source Link: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46865

Comments	new comment
Nobody has commented yet. Will you be the first?

Forum

CVEs

National Cyber Warfare Foundation (NCWF) Forums

CVE-2023-46865

Comments