CVE-2023-43958

Summary

CVE-2023-43958 is an arbitrary file upload vulnerability affecting the Hospital Management System v4.0 and specifically its component /jquery-file-upload/server/php/index.php. This issue enables unauthenticated attackers to upload any file to the server, potentially leading to the execution of arbitrary code. By exploiting this weakness, malicious actors can gain unauthorized access to sensitive data or even take control of the system. This vulnerability poses a significant risk to the security and integrity of the affected hospital management system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.