VULNERABILITY INTELLIGENCE

CVE-2023-0265

CVSS score8.8 HIGH
EPSS probability1.60%
CISA KEVNot currently listed
Published2023-04-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers.

Weakness classification

  • nvd@nist.gov: CWE-434
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-434

Primary references