CVE-2023-28128

2023-05-0900:00:00

CWE-434

hackerone

www.cve.org

unrestricted upload

file type

vulnerability

avalanche

remote code execution

0.13 Low

EPSS

Percentile

95.5%

JSON

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove code execution.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Avalanche",
    "versions": [
      {
        "version": "Avalanche version 6.3.x and below",
        "status": "affected"
      }
    ]
  }
]