CVE-2023-40980

CriticalCVSS 9.8

Published: 01/09/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.06%

60th percentile - higher than 60% of all known CVEs

Summary

CVE-2023-40980 in DWSurvey DWSurvey-OSS version 3.2.0 and earlier allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.

Risk Assessment

This vulnerability poses a serious risk to organizations by allowing remote code execution, potentially leading to system compromise.

Recommendation

It is recommended to update DWSurvey DWSurvey-OSS to the latest version to mitigate this vulnerability and implement additional security measures regarding file uploads.

Original NVD description (English source)

File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.