CVEvulnerability

CVE-2023-25909

9.8 CRITICAL Published 2023-03-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-434

Description

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service.

Affected configurations

• hgiga oaklouds portal (>= 2.0 < 2.0-10) • hgiga oaklouds portal (>= 3.0 < 3.0-10)

Related

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References