VULNERABILITY INTELLIGENCE

CVE-2023-1722

CVSS score9.1 CRITICAL
EPSS probability0.36%
CISA KEVNot currently listed
Published2023-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

Weakness classification

  • help@fluidattacks.com: CWE-352
  • nvd@nist.gov: CWE-352

Primary references