CVE-2023-0265
CVE-2023-0265
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers.
CVSS 8.8 · High · EPSS 1.6%
- Published
- Updated
Stack: php
Affected products and versions
uvdesk
- Versions
- 1.1.1: Affected
No fix published
uvdesk/community-skeleton Packagist
- Versions
- v1.0.0
- v1.0.1
- v1.0.10
- v1.0.11
- v1.0.12
- v1.0.13
- v1.0.14
- v1.0.16
- v1.0.17
- v1.0.18
- v1.0.3
- v1.0.4
- v1.0.5
- v1.0.6
- v1.0.7
- v1.0.8
- v1.0.9
- v1.1.0
- v1.1.1
- Affected ranges
- ECOSYSTEM: ≤ 1.1.1
No fix published