CVE-2023-37198

MediumCVSS 6.8

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.75%

50th percentile - higher than 50% of all known CVEs

Summary

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with install packages.

Risk Assessment

This vulnerability poses a risk of remote code execution, potentially allowing unauthorized users to take control of the system.

Recommendation

It is recommended to restrict user permissions and implement verification mechanisms for install packages before uploading.

Original NVD description (English source)

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with install packages.