CVE-2023-38836

High

File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type…

mitre·CWE-434·Published 2023-08-21

CVSS

8.8

EPSS

0.73

KEV

Exploits

cve.orgen

146 chars

File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.

NVDen

146 chars

File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.

Una vulnerabilidad de carga de archivos en BoidCMS v2.0.0 permite a un atacante remoto ejecutar código arbitrario a través del componente de cabecera GIF.

CVE-2023-38836

CVSS metrics across sources