CVE Catalog

CVE-2023-6675

Critical
Published: Translated: NVD NIST

Summary

CVE-2023-6675 vulnerability affects CyberMath, allowing unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server.

Risk Assessment

Exploitation of this vulnerability could lead to server takeover, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update CyberMath to version 1.5 or later to mitigate this vulnerability and implement additional security measures regarding file uploads.

Original NVD description (English source)

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. This issue affects CyberMath: from v.1.4 before v.1.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS