CVE Catalog
CVE-2023-38836
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk69.00%
99th percentile - higher than 99% of all known CVEs
Summary
File upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.
Risk Assessment
An attacker can upload a malicious file that, when executed on the server, may lead to application compromise, data theft, or further attacks on the infrastructure.
Recommendation
Immediately update BoidCMS to the latest version and implement additional server-side file validation, such as checking the actual file content.
Original NVD description (English source)
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.