high8.8
CVE-2023-23314
An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file.
Impact
An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary code via a crafted .ssh file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zdir Project | Zdir | Version 3.2.0 |