VULNERABILITY INTELLIGENCE

CVE-2023-1721

CVSS score9.1 CRITICAL
EPSS probability0.99%
CISA KEVNot currently listed
Published2023-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

Weakness classification

  • help@fluidattacks.com: CWE-434
  • nvd@nist.gov: CWE-434

Primary references