← Back to browse
·
API
CVE-2023-34747
Severity
CRITICAL
CVSS
9.8
EPSS
0.20046
Risk score
46.22
CISA KEV
No
PoC
No
Published
2023-06-14
Modified
2025-01-06
First seen
2026-08-07
Aliases
EUVD-2023-38789, GHSA-M62M-MVWC-XQ5V
Products
n/a:n/a n/a
Sources
euvd
EUVD-2023-38789
Description
File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-38789
https://github.com/ujcms/ujcms/issues/4