CVE-2023-39377

Summary

CVE-2023-39377 is a vulnerability affecting SiberianCMS. This issue (CWE-434) allows an administrative user to upload harmful filetypes unrestrictedly, potentially leading to serious security risks. The unspecified upload method enables a malicious actor to bypass security measures and introduce dangerous content into the system. This vulnerability underlines the importance of enforcing strict filetype restrictions to prevent unauthorized uploads and protect against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.