CVE-2023-4409
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A critical vulnerability has been found in NBS&HappySoftWeChat version 1.1.6, allowing unrestricted file uploads. The attack can be launched remotely.
Risk Assessment
The organization is at risk of remote attacks, which may lead to unauthorized access to the system or data.
Recommendation
It is recommended to immediately update NBS&HappySoftWeChat to the latest version to patch this vulnerability.
Original NVD description (English source)
A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237512.