Lucene search
MitreCVELIST:CVE-2023-46865HistoryOct 30, 2023 - 12:00 a.m.
CVE-2023-46865
2023-10-3000:00:00
mitre
www.cve.org
1
insecure code execution
uploaded logo
companycontroller
EPSS
0.001
Percentile
42.5%
/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.
Related
githubexploit
githubexploit
Exploit for Code Injection in Craterapp Crater
2023-11-09 21:22:47
osv
osv
CVE-2023-46865
2023-10-30 01:15:21
nvd
nvd
CVE-2023-46865
2023-10-30 01:15:21
cve
cve
CVE-2023-46865
2023-10-30 01:15:21
prion
prion
Code injection
2023-10-30 01:15:00