CVE-2025-23953
CVSS 3.1 Score 10 of 10 (high)
Details
Published Jan 22, 2025
CWE ID 434
Summary
CVE-2025-23953 is a critical vulnerability affecting Innovative Solutions user files. An attacker can exploit this Unrestricted File Upload vulnerability to upload a Web Shell to a web server. This issue allows the uploading of dangerous file types, which could lead to serious security consequences. The affected user files range from version 1 through 2.4.2. It is recommended that affected users apply patches or updates as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.