CVSS 3.1 Score 8.8 of 10 (high)


Published Dec 15, 2023
Updated: Dec 22, 2023
CWE ID 434


CVE-2023-48394 is a cyber vulnerability that affects the Kaifa Technology WebITR online attendance system. It allows remote attackers with regular user privileges to exploit the system's file uploading function, which does not restrict the upload of files with dangerous types. As a result, attackers can upload arbitrary files and execute arbitrary commands or disrupt services. The vulnerability has a High base severity and score of 8.8, indicating its potential danger to organizations. To remediate this vulnerability, it is recommended to implement restrictions on file types during uploading to prevent unauthorized and potentially malicious files from being uploaded.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-48394 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options