← Back to browse · API

CVE-2023-28128

Severity
HIGH
CVSS
7.2
EPSS
0.84697
Risk score
58.44
CISA KEV
No
PoC
No
Published
2023-05-09
Modified
2025-01-28
First seen
2026-08-07
Aliases
EUVD-2023-31839, GHSA-8MXM-MXMW-HJRG
Products
Ivanti:Avalanche Avalanche version 6.3.x and below
Sources
euvd EUVD-2023-31839

Description

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove code execution.

References