6.1
CVSSv3

CVE-2023-37602

Published: 20/07/2023 Updated: 31/07/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows malicious users to execute arbitrary code via uploading a crafted PNG file.

Vulnerable Product Search on Vulmon Subscribe to Product

alkacon opencms 15.0.0