CVSS 3.1 Score 7.8 of 10 (high)


Published Oct 17, 2023
Updated: Apr 17, 2024
CWE ID 434


CVE-2023-44824 is a vulnerability that affects the Expense Management System v.1.0. It allows a local attacker to execute arbitrary code by uploading a crafted file to the sign-up.php component. The risk score for this vulnerability is 25, indicating a high severity level. The base severity is also rated as high, with a base score of 7.8. The privileges required for exploitation are low, and there is no user interaction required. The attack vector is local, and both the confidentiality and integrity impacts are rated as high. This vulnerability poses a significant danger to organizations using the Expense Management System v.1.0, as it can lead to unauthorized code execution and potential compromise of sensitive data. To remediate this vulnerability, it is recommended to apply any available patches or updates provided by the vendor to address this issue promptly.

(Note: This report has been generated based on the provided information without any external sources.)

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-44824 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options