CVE-2023-3375

High

Published: 05/09/2023(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2023-3375 vulnerability in Unisign Bookreen allows unrestricted upload of files with dangerous types, leading to OS command injection. This issue affects Bookreen versions before 3.0.0.

Risk Assessment

Organizations may be exposed to attacks that allow unauthorized command execution on the operating system, potentially leading to serious security breaches.

Recommendation

It is recommended to update Unisign Bookreen to version 3.0.0 or later to mitigate this vulnerability.

Other vulnerabilities in Unisign Bookreen

CVE-2023-3374Critical
CVE-2023-3374 vulnerability in Unisign Bookreen allows for privilege escalation due to an incomplete list of disallowed inputs. This issue affects Bookreen versions before 3.0.0.

Original NVD description (English source)

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This issue affects Bookreen: before 3.0.0.