CVE-2023-51924

CriticalCVSS 9.8

Published: 20/01/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.82%

53th percentile - higher than 53% of all known CVEs

Summary

An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05. Attackers can upload a crafted file, leading to arbitrary code execution on the server.

Risk Assessment

Risk of server compromise through remote code execution. This may result in loss of confidentiality, integrity, and availability of data and the system.

Recommendation

Immediately update YonBIP to the latest version and implement file validation and filtering mechanisms. Restrict access to the interface to trusted users only.

Original NVD description (English source)

An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file.