Lucene search
Veracode Vulnerability DatabaseVERACODE:40304HistoryApr 27, 2023 - 5:06 a.m.
Remote Code Execution (RCE)
2023-04-2705:06:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
remote code execution
vulnerability
profile pictures
software
0.001 Low
EPSS
Percentile
46.5%
uvdesk/community-skeleton is vulnerable to Remote Code Execution. The vulnerability exists because the library does not properly validate uploaded profile pictures, allowing an attacker to upload and execute a malicious file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| uvdesk/community-skeleton | le | 2.0.x-dev | |
| uvdesk/community-skeleton | le | 2.0.x-dev |
Related
nvd
nvd
CVE-2023-0265
2023-04-04 22:15:07
osv
osv
CVE-2023-0265
2023-04-04 22:15:07
Uvdesk remote code execution vulnerability
2023-04-05 00:30:39
cve
cve
CVE-2023-0265
2023-04-04 22:15:07
cvelist
cvelist
CVE-2023-0265
2023-04-04 00:00:00
prion
prion
Code injection
2023-04-04 22:15:00
github
github
Uvdesk remote code execution vulnerability
2023-04-05 00:30:39