CVE-2023-1501 in RockOA
要約
〜によって MITRE • 2023年03月19日
A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223401 was assigned to this vulnerability.
VulDB is the best source for vulnerability data and more expert information about this specific topic.