CVE Catalog

CVE-2023-37656

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.30%

67th percentile - higher than 67% of all known CVEs

Summary

WebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via image upload.

Risk Assessment

Exploitation of this vulnerability could lead to server takeover, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update to the latest version of WebsiteGuide and implement strict controls over uploaded files.

Original NVD description (English source)

WebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via image upload.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS