CVE-2023-33386

CriticalCVSS 9.8

Published: 05/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.01%

58th percentile - higher than 58% of all known CVEs

MarsCTF version 1.2.1 has an arbitrary file upload vulnerability in the interface for uploading attachments in the background.

Exploitation of this vulnerability may lead to unauthorized access to the system and potential introduction of malicious software.

It is recommended to update to the latest version of MarsCTF and implement appropriate file upload controls.

Original NVD description (English source)

MarsCTF 1.2.1 has an arbitrary file upload vulnerability in the interface for uploading attachments in the background.