CVE Catalog
CVE-2023-41637
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk1.07%
60th percentile - higher than 60% of all known CVEs
Summary
An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update to the latest version of the software and implement mechanisms to restrict the uploading of unauthorized files.
Original NVD description (English source)
An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file.