CVE-2023-2712

The vulnerability in the Rental Module developed by a third party for Ideasoft's e-commerce platform allows unrestricted upload of files with dangerous types, leading to command injection and the ability to upload malicious files, including web shells to a server.

Exploitation of this vulnerability could lead to server takeover, posing a serious threat to the security of the organization's data and infrastructure.

It is recommended to update the Rental Module to version 23.05.15 or later and implement strict controls on file uploads.