CVE-2023-34854
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function. This may allow uploading dangerous files.
Risk Assessment
An attacker may upload malicious files, potentially leading to code execution or application compromise. This affects confidentiality, integrity, and availability.
Recommendation
Update HotelDruid to version 3.0.6 or later. Until patched, restrict access to the backup/restore function and validate uploaded files.
Other vulnerabilities in HotelDruid
See all- CVE-2025-44203High
In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup completion, causing a race condition during database creation. Sending many concurrent requests can disclose the administrator username, password hash, and salt, and leave the setup partially initialized, preventing login and requiring reinstallation.
- CVE-2023-34537Medium
A Reflected XSS vulnerability was discovered in HotelDruid version 3.0.5, allowing an attacker to inject malicious code into webpage parameters, potentially tricking users in their browsers or exfiltrating data.
- CVE-2023-33817High
Version 3.0.5 of hoteldruid was found to contain a SQL injection vulnerability.
Original NVD description (English source)
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS