CVE-2023-38915

CriticalCVSS 9.8

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.72%

49th percentile - higher than 49% of all known CVEs

Summary

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbitrary code via the upload type function.

Risk Assessment

An attacker can exploit this vulnerability to remotely execute malicious code, potentially leading to system compromise.

Recommendation

It is recommended to update to the latest version of the software to mitigate this vulnerability and implement additional security measures for file uploads.

Original NVD description (English source)

File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function.