CVE-2023-53871
CriticalSummary
Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.
Risk Assessment
The risk includes the possibility of executing malicious code on the server, potentially leading to takeover of the application or server.
Recommendation
Upgrade Soosyze to the latest version and implement fixes in the file upload mechanism, such as file type validation.
Original NVD description (English source)
Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.