VULNERABILITY INTELLIGENCE
CVE-2023-34854
CVSS score6.6 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-09-14
Last modified2026-09-22
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.
Weakness classification
- cve@mitre.org: CWE-434