CVE-2023-34747

CriticalCVSS 9.8

Published: 14/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

20.05%

97th percentile - higher than 97% of all known CVEs

There is a file upload vulnerability in ujcms version 6.0.2 via the endpoint /api/backend/core/web-file-upload/upload.

An attacker could exploit this vulnerability to upload malicious files, potentially leading to system compromise.

It is recommended to update to the latest version of ujcms and implement appropriate security measures for uploaded files.

Original NVD description (English source)

File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.