CVE-2023-50692

Summary

CVE-2023-50692 is a file upload vulnerability affecting JIZHICMS version 2.5. An attacker can exploit this flaw by uploading a malicious file to the download_url parameter in the app/admin/exts/ directory. Once the file is uploaded and downloaded, the attacker can execute arbitrary code remotely on the targeted system. This vulnerability poses a significant risk to systems running the affected version of JIZHICMS and requires immediate attention for patching or mitigation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.