CVE-2023-34833

MediumCVSS 6.1

Published: 15/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.54%

41th percentile - higher than 41% of all known CVEs

Summary

An arbitrary file upload vulnerability in the /api/upload.php component of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file.

Risk Assessment

This vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.

Recommendation

It is recommended to immediately update ThinkAdmin to the latest version and implement mechanisms to restrict file uploads.

Original NVD description (English source)

An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file.